Where
-Infinity
0

Trending

Last week
Last month
Last year

ABB Aspect-ent-12 Firmwareremote code execution

Risk 78
Severity
9.4
Exploited
EPSS
0.09%
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series

v3.08.01

; MATRIX Series

v3.08.01 allows Attacker to execute arbitrary code remotely

First published (updated )
CVE-2024-6298

ABB Aspect-ent-12 Firmwareunauthorized file access

Risk 78
Severity
9.4
Exploited
EPSS
0.09%
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series

v3.08.01

; MATRIX Series

v3.08.01 allows Attacker to access files unauthorized

First published (updated )
CVE-2024-6209

ABB ASPECT-EnterpriseCredentials Disclosure - keys

Risk 86
Severity
9.8
AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3..

First published (updated )
CVE-2024-51547

ABB Aspect-ent-2 Firmwareoff-by-one-error

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51554

ABB Aspect-ent-2 Firmwareunauthorized file access

Risk 68
Severity
9.6
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-6515

ABB Aspect-ent-2 FirmwareCross Site Scripting XSS

Risk 97
Severity
9.3
Exploited
XSS
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-6516

ABB Aspect-ent-2 FirmwareSSRF Server Side Request Forgery

Risk 82
Severity
9.9
SSRF
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-6784

ABB Aspect-ent-2 FirmwareDefault Credentials

Risk 87
Severity
10
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products:

ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

First published (updated )
CVE-2024-51551

ABB Aspect-ent-12 FirmwareData Validation / Sanitization

Risk 95
Severity
10
Exploited
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51550

ABB Aspect-ent-12 FirmwareAbsolute Path Traversal

Risk 82
Severity
10
Path Traversal
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51549

ABB Aspect-ent-12 FirmwareDangerous File Upload

Risk 82
Severity
9.9
Malicious File Upload
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51548

ABB Aspect-ent-12 FirmwareCredentails Disclosure

Risk 68
Severity
8.7
Exploited
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51546

ABB Aspect-ent-12 FirmwareUsername Enumeration

Risk 87
Severity
10
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51545

ABB Aspect-ent-12 FirmwareService Control

Risk 57
Severity
8.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51544

ABB Aspect-ent-12 FirmwareConfiguration Download

Risk 57
Severity
8.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51542

ABB Aspect-ent-12 FirmwareInformation Disclosure

Risk 57
Severity
8.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Information Disclosure vulnerabilities allow access to application configuration information.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51543

ABB Aspect-ent-12 FirmwareLocal File Inclusion

Risk 57
Severity
8.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51541

ABB Aspect-ent-2 FirmwareRemote Code Execution, RCE

Risk 74
Severity
10
Exploited
EPSS
0.32%
Code Injection, Input Validation
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48839

ABB Aspect-ent-2 FirmwareUnauthorized Access

Risk 74
Severity
10
Exploited
EPSS
0.50%
Code Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48840

ABB Aspect-ent-2 FirmwareDenial of Service, DoS

Risk 43
Severity
7.7
EPSS
0.07%
SQL Injection
AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48843

ABB Aspect-ent-2 FirmwareDenial of Service, DoS

Risk 65
Severity
7.7
Exploited
EPSS
0.16%
AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48844

ABB Aspect-ent-2 FirmwareWeak Password Rules/Strength

Risk 77
Severity
9.8
Exploited
EPSS
0.12%
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products:

ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

First published (updated )
CVE-2024-48845

ABB Aspect-ent-2 FirmwareCross Side Request Forgery, CSRF

Risk 65
Severity
7.3
Exploited
EPSS
0.03%
CSRF
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48846

ABB Aspect-ent-2 FirmwareMD5 bypass operation

Risk 47
Severity
9.1
EPSS
0.03%
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products:

ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

First published (updated )
CVE-2024-48847

ABB Aspect-ent-2 FirmwarePHP Session Fixation

Risk 73
Severity
10
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-11317

ABB Aspect-ent-2 FirmwareFilesize Check

Risk 59
Severity
8.7
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-11316

ABB Aspect-ent-2 FirmwareRemote Code Execution via Command Injection

Risk 86
Severity
9.8
Command Injection, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.

First published (updated )
CVE-2023-0636

ABB Aspect-ent-2 FirmwarePrivilege escalation to root

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01.

First published (updated )
CVE-2023-0635

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203