NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in ABB ASPECT, NEXUS Series en MATRIX Series
view advisory published 2024-12-06
ABB heeft kwetsbaarheden verholpen in ABB ASPECT, NEXUS Series en MATRIX Series (Specifiek voor versies tot 3.08.02).
01
describes (26)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6784US | critical9.9 | — | ||
Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.
Affected products:
ABB A… | ||||
| CVE-2024-6516US | medium6.1 | Exploit | ||
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.
Affected products:
ABB ASPECT - Enterprise v3.… | ||||
| CVE-2024-6515US | high8.1OT elevated | — | ||
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.
Affected pr… | ||||
| CVE-2024-51555US | —OT elevated | — | ||
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default… | ||||
| CVE-2024-51554US | critical9.8 | — | ||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.08… | ||||
| CVE-2024-51551US | critical10.0OT elevated | — | ||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.07… | ||||
| CVE-2024-51550US | critical9.8 | Exploit | ||
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterpr… | ||||
| CVE-2024-51549US | critical9.4 | — | ||
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
M… | ||||
| CVE-2024-51548US | high8.8 | — | ||
Dangerous File Upload vulnerabilities allow upload of malicious scripts.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | ||||
| CVE-2024-51546US | high7.5 | Exploit | ||
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Ser… | ||||
| CVE-2024-51545US | critical9.8 | — | ||
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEX… | ||||
| CVE-2024-51544US | high8.2 | — | ||
Service Control vulnerabilities allow access to service restart requests and vm configuration settings.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.… | ||||
| CVE-2024-51543US | high7.5 | — | ||
Information Disclosure vulnerabilities allow access to application configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRI… | ||||
| CVE-2024-51542US | high8.2 | — | ||
Configuration Download vulnerabilities allow access to dependency configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX… | ||||
| CVE-2024-51541US | high7.5 | — | ||
Local File Inclusion vulnerabilities allow access to sensitive system information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3… | ||||
| CVE-2024-48847US | critical9.1OT elevated | — | ||
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.
Affected products:
ABB AS… | ||||
| CVE-2024-48846US | high7.3 | Exploit | ||
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.
Affected products:
ABB ASPECT - Ent… | ||||
| CVE-2024-48845US | critical9.8 | Exploit | ||
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.
Affec… | ||||
| CVE-2024-48844US | medium6.5 | Exploit | ||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||
| CVE-2024-48843US | high7.5 | — | ||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||
showing 20 of 26
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan