EDB-52217

PoC

ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution

view exploit source exploit_dbtype hardwareauthor LiquidWormpublished 2025-04-15catalog exploit_db
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-6516USmedium6.1Exploit
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products: ABB ASPECT - Enterprise v3.…
CVE-2024-51550UScritical9.8Exploit
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterpr…
CVE-2024-48839UScritical9.8Exploit
Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan