ABB ASPECT System
ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed cus-tomers of this parameter. An attacker can successfully exploit these vulnerabilities and could take remote control of the product and po-tentially insert and run arbitrary code. ABB requires, as noted in previous security advisories and user documentation, that ASPECT should not be exposed to the internet or any other insecure network. Note: In order to exploit an ASPECT, an attacker would need a misconfigured system.
beschreibt (26)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6784US | critical9.9 | — | ||
Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.
Affected products:
ABB A… | ||||
| CVE-2024-6516US | medium6.1 | Exploit | ||
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.
Affected products:
ABB ASPECT - Enterprise v3.… | ||||
| CVE-2024-6515US | high8.1OT erhöht | — | ||
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.
Affected pr… | ||||
| CVE-2024-51555US | —OT erhöht | — | ||
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default… | ||||
| CVE-2024-51554US | critical9.8 | — | ||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.08… | ||||
| CVE-2024-51551US | critical10.0OT erhöht | — | ||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.07… | ||||
| CVE-2024-51550US | critical9.8 | Exploit | ||
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterpr… | ||||
| CVE-2024-51549US | critical9.4 | — | ||
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
M… | ||||
| CVE-2024-51548US | high8.8 | — | ||
Dangerous File Upload vulnerabilities allow upload of malicious scripts.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | ||||
| CVE-2024-51546US | high7.5 | Exploit | ||
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Ser… | ||||
| CVE-2024-51545US | critical9.8 | — | ||
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEX… | ||||
| CVE-2024-51544US | high8.2 | — | ||
Service Control vulnerabilities allow access to service restart requests and vm configuration settings.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.… | ||||
| CVE-2024-51543US | high7.5 | — | ||
Information Disclosure vulnerabilities allow access to application configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRI… | ||||
| CVE-2024-51542US | high8.2 | — | ||
Configuration Download vulnerabilities allow access to dependency configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX… | ||||
| CVE-2024-51541US | high7.5 | — | ||
Local File Inclusion vulnerabilities allow access to sensitive system information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3… | ||||
| CVE-2024-48847US | critical9.1OT erhöht | — | ||
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.
Affected products:
ABB AS… | ||||
| CVE-2024-48846US | high7.3 | Exploit | ||
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.
Affected products:
ABB ASPECT - Ent… | ||||
| CVE-2024-48845US | critical9.8 | Exploit | ||
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.
Affec… | ||||
| CVE-2024-48844US | medium6.5 | Exploit | ||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||
| CVE-2024-48843US | high7.5 | — | ||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-007-01 JSONself
- ABB CYBERSECURITY ADVISORY - PDF version
- ABB strongly advises customers and system integrators to follow the instructions documented in: FBXi, CBXi and ASPECT® SOLUTIONS, which can be downloaded from the ABB library.
- Recommended Practicesexternal
- ICS Advisory ICSA-25-007-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (104)
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.00 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.02 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.03 and later.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan