ANC, ANC-L, ANC-mini Network Card Security Advisory

This advisory from ABB details multiple vulnerabilities (CVE-2024-47784, CVE-2024-9876, CVE-2024-9877) in the ANC, ANC-L, and ANC-mini network card products running software version 1.1.4 or earlier. An attacker with local network access can exploit these web HMI flaws to escalate privileges to device admin and take control of the product; the fix is available in software version 1.1.5.