CVE-2024-48848

Published

22 May 2025

Modified

17 June 2026

CVSS Score v4 7.0

Click a component to see what it means

Raw vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0033 26th percentile

Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2024-48848 is a high-severity Allocation of File Descriptors or Handles Without Limits or Throttling (CWE-774) vulnerability in Abb (inferred from references). Its CVSS base score is 7.0 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Endpoint Denial of Service (T1499); ranked at the 26th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SC-6 (Resource Availability) — see the control section below for these in your framework.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2024-54590

Vulnerability Data

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CWE(s): CWE-774

Related Threats

MITRE ATT&CK Enterprise Techniques

T1499 Endpoint Denial of Service Impact

Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users.

attack.mitre.org →

T1499.001 OS Exhaustion Flood Impact

Adversaries may launch a denial of service (DoS) attack targeting an endpoint's operating system (OS).

attack.mitre.org →

Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-27887Shared CWE-774

CVE-2026-27204Shared CWE-774

Affected Assets

Abb

—

inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Control response

Prevent

Stop it (NIST 800-53)

—

Detect

Catch it (NIST detect / respond)

—

Harden

Shrink the surface (DISA STIG)

2 hardening rules · 1 OS baseline

Validate

Prove the fix (OWASP ASVS)

—

Mitigating Controls (NIST 800-53 r5) AI

SC-6 Resource Availability good match

SC-6 directly requires allocating resources (including file descriptors) according to quotas or limits, structurally preventing unbounded allocation.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match

prevents

Secure-development practices directly require resource-limit and throttling controls, preventing unbounded allocation by design.

ID.RA-01 partial match

prevents

Identifying and recording resource-management vulnerabilities can surface missing allocation limits before deployment.

PR.IR-04 partial match

prevents

Capacity monitoring helps detect exhaustion but does not impose per-actor allocation limits at the code level.

PR.PS-01 partial match

prevents

Hardened configuration baselines can enforce OS-level descriptor/handle quotas that compensate for missing application limits.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.28 Secure coding mostly match

prevents

Secure coding standards explicitly require limits on file-handle allocation.

A.8.29 Security testing in development and acceptance mostly match

finds

Security testing can detect unbounded descriptor allocation before release.

A.8.25 Secure development life cycle partial match

prevents

Secure development lifecycle requires resource-limit checks during design and coding.

A.8.26 Application security requirements partial match

prevents

Application security requirements can mandate throttling and descriptor limits.