Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 236

Export CSV
CVE-2025-10205

Predictable Salt and Weak Hashing Algorithm

Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Flxeon
CVE-2024-51553

Predictable Filename

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13951

One way hash with predictable salt

One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13950

Log Injection

Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2025-2409

Admin Authorized System File corruption

File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

CVSS 4.0 · 8.9 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13945

Stored Absolute Path Traversal

Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2025-30171

Admin Authorized System File Deletion

System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13929

Authenticated Servlet Command Injection

Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13931

Authenticated Relative Path Traversal

Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13930

Authenticated Unchecked Loop Condition

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13955

SQL Injection 2nd Order

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13957

SSRF Server Side Request Forgery

SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13948

Insecure Permissions

Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2024-13946

Binary Planting / LoadLibrary DLL's not Signed

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS 4.0 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Abb
Products
Aspect Enterprise Matrix Series Nexus Series
CVE-2025-13777

Authentication Bypass due to Improper Session Validation

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Awin Gw100 Rev.2 Awin Gw120
CVE-2025-13778

Device Reboot Control

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Awin Gw100 Rev.2 Awin Gw120
CVE-2025-13779

Configuration Data Spill

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Awin Gw100 Rev.2 Awin Gw120
CVE-2024-3036

Communication DoS vulnerability

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Abb
Products
800xa Base System
CVE-2024-4007

Hard coded default credential contained in install package

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

CVSS 4.0 · 8.7 High EPSS 1.5% KEV · Not listed
Vendors
Abb
Products
Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 and 23 more
CVE-2020-11639

Insufficient access control on Inter process communication,

An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each process might be affected differently. The process could crash or cause communication issues on the affected node, effectively causing a denial-of-service attack. The attacker could tamper with the data transmitted, causing the product to store wrong information or act on wrong data or display wrong information. This issue affects Advant MOD 300 AdvaBuild: from 3.0 through 3.7 SP2. For an attack to be successful, the attacker must have local access to a node in the system and be able to start a specially crafted application that disrupts the communication. An attacker who successfully exploited the vulnerability would be able to manipulate the data in such way as allowing reads and writes to the controllers or cause Windows processes in 800xA for MOD 300 and AdvaBuild to crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Abb
Products
Advabuild