Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2024-51550

Data Validation / Sanitization

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CVSS 4.0 · 9.3 Critical EPSS 1.8% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 38 more
CVE-2024-51551

Default Credentials

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 38 more
CVE-2024-51543

Information Disclosure

Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 38 more
CVE-2024-51545

Username Enumeration

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 38 more
CVE-2024-51548

Dangerous File Upload

Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 38 more
CVE-2024-51554

off-by-one-error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 35 more
CVE-2024-6298

remote code execution

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

CVSS 4.0 · 9.4 Critical EPSS 19.0% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 35 more
CVE-2024-6209

unauthorized file access

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized

CVSS 4.0 · 9.4 Critical EPSS 17.2% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 35 more