ELSB/BLBA ASPECT advisory several CVEs
ABB became aware of vulnerabilities in ASPECT product versions listed as affected in the advisory. The earliest report dates to June 2023. ABB has fixed most of the vulnerabilities reported. At the moment there are no plans of corrective measures for remaining vulnerabilities in the affected products. ASPECT is an on-premise Building Management System (BMS) that provides an additional option to be remotely accessible. In order to support customers’ demand for cloud connectivity, ABB has decided to replace ASPECT and will introduce customers to a new solution based on the latest Industry level cyber security standards. The new solution will bring HW and SW capabilities that reflect state-of-the-art technology and is delivered including a maintenance plan that offers customers the best planning security. Customers who have concerns about continuing the operation of ASPECT may contact ABB sales service to become advised about further support options.
beschreibt (31)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-13945US | — | — | ||
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data
if administrator credentials become compromised.
This issue affects ASPECT-Enterprise: throug… | ||||
| CVE-2024-51553US | — | — | ||
Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Ent… | ||||
| CVE-2024-51552US | — | — | ||
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; M… | ||||
| CVE-2024-48848US | — | — | ||
Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-E… | ||||
| CVE-2024-13958US | — | — | ||
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through… | ||||
| CVE-2024-13957US | — | — | ||
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: thr… | ||||
| CVE-2024-13956US | — | — | ||
SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*;… | ||||
| CVE-2024-13955US | — | — | ||
2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affec… | ||||
| CVE-2024-13954US | — | — | ||
Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.*; NEXUS… | ||||
| CVE-2024-13953US | — | — | ||
Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through… | ||||
| CVE-2024-13952US | — | — | ||
Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Ent… | ||||
| CVE-2024-13951US | — | — | ||
One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series… | ||||
| CVE-2024-13950US | — | — | ||
Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-Enterp… | ||||
| CVE-2024-13949US | — | — | ||
Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-E… | ||||
| CVE-2024-13948US | —OT erhöht | — | ||
Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUS… | ||||
| CVE-2024-13947US | —OT erhöht | — | ||
Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; N… | ||||
| CVE-2024-13946US | — | Exploit | ||
DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enter… | ||||
| CVE-2025-30173US | — | — | ||
File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throu… | ||||
| CVE-2025-30172US | — | — | ||
Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Ser… | ||||
| CVE-2025-30171US | —OT erhöht | — | ||
System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised.
This issue affects ASPECT-En… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (124)
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantASP-ENT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantMAT-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEX-2x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- Kein Fix geplantNEXUS-3-x
ABB recommend applying the "Mitigating factors"
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenASP-ENT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenMAT-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEX-2x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
- BehobenNEXUS-3-x
The vulnerabilities have been resolved in the following product versions: 3.08.04 and later.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan