Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how abb compares to other vendors in security performance

View Risk Score →

Software

abb matrix-11
11
abb matrix-11 firmware
11
abb matrix-216
11
abb matrix-216 firmware
11
abb matrix-232
11
abb matrix-264
11
abb matrix-264 firmware
11
abb matrix-296
11
abb nexus-2128 firmware
11
abb nexus-264 firmware
11
abb nexus-3-2128
11
abb nexus-3-264
11
abb nexus-3-264 firmware
11
abb nexus-2128-g
10
abb nexus-264-a firmware
10
abb nexus-264-f
10
abb nexus-264-g firmware
10
abb aspect
8
abb matrix series
8
abb nexus series
8
abb nexus
7
abb nexus 2128-a
7
abb nexus 2128-f
7
abb aspect-ent-12
4
abb aspect-ent-12 firmware
4
abb aspect-ent-2
4
abb aspect-ent-2 firmware
4
abb aspect-ent-256
4
abb aspect-ent-256 firmware
4
abb aspect-ent-96
4
abb aspect-ent-96 firmware
4
abb matrix-232 firmware
4
abb matrix-296 firmware
4
abb nexus-2128
4
abb nexus-264
4
abb nexus-3-2128 firmware
4
abb nexus-2128-a
3
abb nexus-2128-a firmware
3
abb nexus-2128-f
3
abb nexus-2128-f firmware
3
abb nexus-2128-g firmware
3
abb nexus-264-a
3
abb nexus-264-f firmware
3
abb nexus-264-g
3
abb aspect - enterprise
1
abb flow-x r firmware
1
abb flow-x/c
1
abb flow-x/c firmware
1
abb flow-x/k
1
abb flow-x/k firmware
1

ABB Aspect-ent-2 FirmwareUnauthorized Access

Risk 74
Severity
10
Exploited
EPSS
0.50%
Code Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48840

ABB Aspect-ent-2 FirmwareRemote Code Execution, RCE

Risk 74
Severity
10
Exploited
EPSS
0.32%
Code Injection, Input Validation
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48839

ABB Aspect-ent-12 FirmwareData Validation / Sanitization

Risk 95
Severity
10
Exploited
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51550

ABB Aspect-ent-2 FirmwareWeak Password Rules/Strength

Risk 77
Severity
9.8
Exploited
EPSS
0.12%
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products:

ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

First published (updated )
CVE-2024-48845

ABB Aspect-ent-12 Firmwareunauthorized file access

Risk 78
Severity
9.4
Exploited
EPSS
0.09%
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series

v3.08.01

; MATRIX Series

v3.08.01 allows Attacker to access files unauthorized

First published (updated )
CVE-2024-6209

ABB Aspect-ent-12 Firmwareremote code execution

Risk 78
Severity
9.4
Exploited
EPSS
0.09%
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series

v3.08.01

; MATRIX Series

v3.08.01 allows Attacker to execute arbitrary code remotely

First published (updated )
CVE-2024-6298

ABB Aspect-ent-2 FirmwareCross Site Scripting XSS

Risk 97
Severity
9.3
Exploited
XSS
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-6516

ABB AspectHard coded default credential contained in install package

Risk 95
Severity
8.8
Exploited
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

First published (updated )
CVE-2024-4007

ABB Aspect-ent-12 FirmwareCredentails Disclosure

Risk 68
Severity
8.7
Exploited
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-51546

ABB Aspect-ent-2 FirmwareDenial of Service, DoS

Risk 65
Severity
7.7
Exploited
EPSS
0.16%
AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48844

ABB Aspect-ent-2 FirmwareCross Side Request Forgery, CSRF

Risk 65
Severity
7.3
Exploited
EPSS
0.03%
CSRF
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

First published (updated )
CVE-2024-48846

ABB Flow-x\/m FirmwareFlow-X disclosure of sensitive information to unauthenticated users

Risk 65
Severity
5.3
Exploited
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

First published (updated )
CVE-2023-1258

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203