CVE-2024-12430

An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user. All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.

• CWE-280

• https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch
• https://seclists.org/fulldisclosure/2025/Jan/5

Published

Jan 7, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12425Improper Limitation of a Pathname to a Restricted Directory …3.3
• CVE-2024-12426Exposure of Environmental Variables and arbitrary INI file v…6.5
• CVE-2024-12427The Multi Step Form plugin for WordPress is vulnerable to un…5.3
• CVE-2024-12428The WP Data Access – App, Table, Form and Chart Builder plug…7.5
• CVE-2024-12429An attacker who successfully exploited these vulnerabilities…5.1
• CVE-2024-1243Improper input validation in the Wazuh agent for Windows pri…9.5
• CVE-2024-12431An issue was discovered in GitLab CE/EE affecting all versio…4.3
• CVE-2024-12432The WPC Shop as a Customer for WooCommerce plugin for WordPr…8.1
• CVE-2024-12433A vulnerability in infiniflow/ragflow versions v0.12.0 allow…9.8
• CVE-2024-12434The SureMembers plugin for WordPress is vulnerable to Sensit…5.3
• CVE-2024-12435The Compare Products for WooCommerce plugin for WordPress is…6.1
• CVE-2024-12436The WP Customer Area WordPress plugin through 8.2.4 does not…4.3