When Trust Falls: ABB Cylon Aspect Vulnerability Leaves Doors Wide Open
ABB’s Aspect 3.08.02 has a vulnerability that lets hackers perform admin-level tricks with a simple HTTP request, like a magician pulling a rabbit out of a hat—if the audience is a logged-in user visiting a dodgy website. Just another day in the world of building management systems!
Hot Take:
ABB Cylon’s Aspect system seems to have a new hobby: playing matchmaker between unsuspecting users and cybercriminals. Who knew building management systems had a side gig in trust issues?
Key Points:
- ABB’s Aspect building management system is susceptible to Cross-Site Request Forgery (CSRF) attacks.
- Firmware versions up to 3.08.02 are affected, giving administrative control without proper checks.
- The vulnerability was discovered by Gjoko ‘LiquidWorm’ Krstic.
- Users risk having unauthorized actions executed if they visit malicious websites.
- Advisory details are documented under CVE-2024-48846.
Already a member? Log in here