abb nexus-2128-a firmware
productUScpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
15critical11high2medium0low
updated 2026-10-30
01
vulnerabilities (28)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2024-6298US | critical9.8 | Exploit | ||||
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to execute arbitrary code remotely | ||||||
| CVE-2024-6209US | high7.5 | Exploit | ||||
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to access files unauthorized | ||||||
| CVE-2024-48839US | critical9.8 | Exploit | ||||
Improper Input Validation vulnerability allows Remote Code Execution.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | ||||||
| CVE-2024-48840US | critical9.8 | Exploit | ||||
Unauthorized Access vulnerabilities allow Remote Code Execution.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | ||||||
| CVE-2024-48845US | critical9.8 | Exploit | ||||
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.
Affec… | ||||||
| CVE-2024-51550US | critical9.8 | Exploit | ||||
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterpr… | ||||||
| CVE-2024-51546US | high7.5 | Exploit | ||||
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Ser… | ||||||
| CVE-2024-6516US | medium6.1 | Exploit | ||||
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.
Affected products:
ABB ASPECT - Enterprise v3.… | ||||||
| CVE-2024-48844US | medium6.5 | Exploit | ||||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||||
| CVE-2024-48846US | high7.3 | Exploit | ||||
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.
Affected products:
ABB ASPECT - Ent… | ||||||
| CVE-2024-51544US | high8.2 | — | ||||
Service Control vulnerabilities allow access to service restart requests and vm configuration settings.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.… | ||||||
| CVE-2023-0636US | critical9.8 | — | ||||
Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), AB… | ||||||
| CVE-2024-51547US | critical9.8OT elevated | — | ||||
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3… | ||||||
| CVE-2024-11316US | high7.5 | — | ||||
Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.… | ||||||
| CVE-2024-51548US | high8.8 | — | ||||
Dangerous File Upload vulnerabilities allow upload of malicious scripts.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | ||||||
| CVE-2024-51549US | critical9.4 | — | ||||
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
M… | ||||||
| CVE-2024-6784US | critical9.9 | — | ||||
Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.
Affected products:
ABB A… | ||||||
| CVE-2024-51551US | critical10.0OT elevated | — | ||||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.07… | ||||||
| CVE-2024-51545US | critical9.8 | — | ||||
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEX… | ||||||
| CVE-2024-11317US | critical10.0 | — | ||||
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.
Affected products:… | ||||||
| CVE-2024-6515US | high8.1OT elevated | — | ||||
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.
Affected pr… | ||||||
| CVE-2024-51554US | critical9.8 | — | ||||
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.08… | ||||||
| CVE-2023-0635US | critical9.8 | — | ||||
Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules)… | ||||||
| CVE-2024-51543US | high7.5 | — | ||||
Information Disclosure vulnerabilities allow access to application configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRI… | ||||||
| CVE-2024-51542US | high8.2 | — | ||||
Configuration Download vulnerabilities allow access to dependency configuration information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX… | ||||||
| CVE-2024-51541US | high7.5 | — | ||||
Local File Inclusion vulnerabilities allow access to sensitive system information.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3… | ||||||
| CVE-2024-48843US | high7.5 | — | ||||
Denial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;… | ||||||
| CVE-2024-48847US | critical9.1OT elevated | — | ||||
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.
Affected products:
ABB AS… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-1287Improper Validation of Specified Type of Input4 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
- CWE-15External Control of System or Configuration Setting2 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory2 CVEs
- CWE-522Insufficiently Protected Credentials2 CVEs
- CWE-552Files or Directories Accessible to External Parties2 CVEs
- CWE-798Use of Hard-coded Credentials2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE28 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan