ABB NEXUS Series NEXUS-3-x

Name: ABB NEXUS Series NEXUS-3-x
Brand: ABB

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

14critical10high2medium0low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-48839US	critical9.8	2.83% (87th)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48840US	critical9.8	2.06% (81st)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48845US	critical9.8	1.82% (79th)	Exploit	no fix	2024-12-05	≤ 3.07.03
CVE-2024-51550US	critical9.8	1.81% (79th)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-4007US	—OT elevated	1.51% (74th)	Exploit	no fix	2024-07-01	≤ 3.07.02
CVE-2024-51546US	high7.5	1.47% (74th)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-6516US	medium6.1	1.08% (65th)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48844US	medium6.5	0.87% (59th)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48846US	high7.3	0.64% (51st)	Exploit	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51544US	high8.2	13.2% (96th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2023-0636US	critical9.8	1.31% (70th)	—	no fix	2023-06-05	≤ 3.07.01
CVE-2024-51547US	critical9.8OT elevated	0.62% (49th)	—	no fix	2025-02-06	≤ 3.08.03
CVE-2024-11316US	high7.5	0.62% (49th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51548US	high8.8	0.59% (48th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51549US	critical9.4	0.54% (45th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-6784US	critical9.9	0.50% (42nd)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51551US	critical10.0OT elevated	0.45% (39th)	—	no fix	2024-12-05	≤ 3.07.03
CVE-2024-51545US	critical9.8	0.43% (37th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-11317US	critical10.0	0.43% (37th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51555US	—OT elevated	0.42% (36th)	—	no fix	2024-12-05	≤ 3.07.03
CVE-2024-6515US	high8.1OT elevated	0.40% (34th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51554US	critical9.8	0.39% (33rd)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2023-0635US	critical9.8	0.37% (31st)	—	no fix	2023-06-05	≤ 3.07.01
CVE-2024-51543US	high7.5	0.33% (27th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51542US	high8.2	0.33% (26th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-51541US	high7.5	0.32% (25th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48843US	high7.5	0.28% (20th)	—	no fix	2024-12-05	≤ 3.08.03
CVE-2024-48847US	critical9.1OT elevated	0.26% (17th)	—	no fix	2024-12-05	≤ 3.08.02

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1287Improper Validation of Specified Type of Input3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-1392Use of Default Credentials2 CVEs
CWE-15External Control of System or Configuration Setting2 CVEs
CWE-521Weak Password Requirements2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan