NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in ABB ASPECT-productlijn
view advisory published 2025-05-23
ABB heeft kwetsbaarheden verholpen in de ASPECT-productlijn, inclusief ASPECT-Enterprise, NEXUS Series en MATRIX Series tot versie 3.08.03.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-30173US | — | — | ||
File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throu… | ||||
| CVE-2025-30172US | — | — | ||
Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Ser… | ||||
| CVE-2025-30171US | —OT elevated | — | ||
System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised.
This issue affects ASPECT-En… | ||||
| CVE-2025-30170US | — | — | ||
Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become comprom… | ||||
| CVE-2025-30169US | — | — | ||
File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: through… | ||||
| CVE-2025-2410US | — | — | ||
Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised.
This issue af… | ||||
| CVE-2025-2409US | — | — | ||
File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised
This issue affects ASPECT-Ente… | ||||
| CVE-2024-9639US | — | — | ||
Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised.
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS S… | ||||
| CVE-2024-13931US | — | — | ||
Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: thro… | ||||
| CVE-2024-13930US | — | — | ||
An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised
This issue af… | ||||
| CVE-2024-13929US | — | — | ||
Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: through 3.08.… | ||||
| CVE-2024-13928US | — | — | ||
SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.
This issue affect… | ||||
| CVE-2024-48853US | — | — | ||
An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterpris… | ||||
| CVE-2024-48850US | — | — | ||
Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources.
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throu… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - cveprojectv5; nvdexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan