Skip to content

Product

ABB aspect enterprise vulnerabilities

21 published CVES affecting ABB aspect enterprise, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
21
Critical
9
High
12
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest ABB aspect enterprise CVEs

Newest publication first

  1. CVE-2024-51551 Default Credentials

    Published
    CriticalCVSS 9.3 EPSS 0.45%

    Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

  2. CVE-2024-51550 Data Validation / Sanitization

    Published
    CriticalCVSS 9.3 EPSS 1.8% Public exploit

    Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  3. CVE-2024-51549 Absolute Path Traversal

    Published
    CriticalCVSS 9.3 EPSS 0.54%

    Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  4. CVE-2024-51548 Dangerous File Upload

    Published
    HighCVSS 8.7 EPSS 0.59%

    Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  5. CVE-2024-51546 Credentails Disclosure

    Published
    HighCVSS 8.7 EPSS 1.5% Public exploit

    Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  6. CVE-2024-51545 Username Enumeration

    Published
    CriticalCVSS 9.3 EPSS 0.43%

    Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  7. CVE-2024-51543 Information Disclosure

    Published
    HighCVSS 8.8 EPSS 0.33%

    Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  8. CVE-2024-51542 Configuration Download

    Published
    HighCVSS 8.8 EPSS 0.33%

    Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  9. CVE-2024-51541 Local File Inclusion

    Published
    HighCVSS 8.8 EPSS 0.32%

    Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  10. CVE-2024-48847 MD5 bypass operation

    Published
    HighCVSS 8.8 EPSS 0.26%

    MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

  11. CVE-2024-48846 Cross Side Request Forgery, CSRF

    Published
    HighCVSS 7.1 EPSS 0.68% Public exploit

    Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  12. CVE-2024-48845 Weak Password Rules/Strength

    Published
    CriticalCVSS 9.3 EPSS 1.8% Public exploit

    Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

  13. CVE-2024-48844 Denial of Service, DoS

    Published
    HighCVSS 7.2 EPSS 0.87% Public exploit

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  14. CVE-2024-48843 Denial of Service, DoS

    Published
    HighCVSS 7.6 EPSS 0.28%

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  15. CVE-2024-48840 Unauthorized Access

    Published
    CriticalCVSS 9.3 EPSS 2.1% Public exploit

    Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  16. CVE-2024-48839 Remote Code Execution, RCE

    Published
    CriticalCVSS 9.3 EPSS 2.8% Public exploit

    Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  17. CVE-2024-11317 PHP Session Fixation

    Published
    CriticalCVSS 9.3 EPSS 0.43%

    Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  18. CVE-2024-11316 Filesize Check

    Published
    HighCVSS 8.7 EPSS 0.62%

    Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  19. CVE-2024-6784 SSRF Server Side Request Forgery

    Published
    HighCVSS 8.7 EPSS 0.50%

    Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  20. CVE-2024-6516 Cross Site Scripting XSS

    Published
    CriticalCVSS 9.3 EPSS 1.1% Public exploit

    Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

  21. CVE-2024-6515 unauthorized file access

    Published
    HighCVSS 8.7 EPSS 0.40%

    Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.