ABB NEX-2x

Name: ABB NEX-2x
Brand: ABB

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

13critical11high2medium0low

updated 2026-10-26

vulnerabilities (58)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6298US	critical9.8	19.0% (97th)	Exploit	no fix	2024-07-05	2 versions
CVE-2024-6209US	high7.5	17.2% (97th)	Exploit	no fix	2024-07-05	2 versions
CVE-2024-48839US	critical9.8	2.83% (87th)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-48840US	critical9.8	2.06% (81st)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-48845US	critical9.8	1.82% (79th)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-51550US	critical9.8	1.81% (79th)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-51546US	high7.5	1.47% (73rd)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-13946US	—	1.09% (65th)	Exploit	no fix	2025-05-22	≤ 3.08.03
CVE-2024-6516US	medium6.1	1.08% (65th)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-48844US	medium6.5	0.87% (58th)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-48846US	high7.3	0.64% (51st)	Exploit	no fix	2024-12-05	2 versions
CVE-2024-51544US	high8.2	13.2% (96th)	—	no fix	2024-12-05	2 versions
CVE-2024-13929US	—	0.74% (55th)	—	no fix	2025-05-22	2 versions
CVE-2024-9639US	—	0.68% (52nd)	—	no fix	2025-05-22	2 versions
CVE-2024-51547US	critical9.8OT elevated	0.62% (49th)	—	no fix	2025-02-06	2 versions
CVE-2024-11316US	high7.5	0.62% (49th)	—	no fix	2024-12-05	2 versions
CVE-2024-51548US	high8.8	0.59% (48th)	—	no fix	2024-12-05	2 versions
CVE-2025-30172US	—	0.58% (48th)	—	no fix	2025-05-22	2 versions
CVE-2024-51549US	critical9.4	0.54% (45th)	—	no fix	2024-12-05	2 versions
CVE-2024-6784US	critical9.9	0.50% (42nd)	—	no fix	2024-12-05	2 versions
CVE-2025-2410US	—	0.50% (42nd)	—	no fix	2025-05-22	2 versions
CVE-2024-48850US	—	0.48% (41st)	—	no fix	2025-05-22	2 versions
CVE-2025-2409US	—	0.46% (40th)	—	no fix	2025-05-22	2 versions
CVE-2024-13956US	—	0.45% (39th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-51551US	critical10.0OT elevated	0.45% (39th)	—	no fix	2024-12-05	2 versions
CVE-2024-13931US	—	0.43% (37th)	—	no fix	2025-05-22	2 versions
CVE-2024-13945US	—	0.43% (37th)	—	no fix	2025-05-23	≤ 3.08.03
CVE-2024-51545US	critical9.8	0.43% (37th)	—	no fix	2024-12-05	2 versions
CVE-2024-11317US	critical10.0	0.43% (37th)	—	no fix	2024-12-05	2 versions
CVE-2024-51555US	—OT elevated	0.42% (36th)	—	no fix	2024-12-05	2 versions
CVE-2024-13950US	—	0.42% (36th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-13952US	—	0.41% (35th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-6515US	high8.1OT elevated	0.40% (33rd)	—	no fix	2024-12-05	2 versions
CVE-2024-51554US	critical9.8	0.39% (33rd)	—	no fix	2024-12-05	2 versions
CVE-2024-13930US	—	0.39% (33rd)	—	no fix	2025-05-22	2 versions
CVE-2024-13955US	—	0.39% (33rd)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-13947US	—OT elevated	0.39% (33rd)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-13928US	—	0.39% (33rd)	—	no fix	2025-05-22	2 versions
CVE-2024-13949US	—	0.39% (32nd)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-48848US	—	0.38% (32nd)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-48853US	—	0.38% (32nd)	—	no fix	2025-05-22	2 versions
CVE-2024-13953US	—	0.36% (30th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2025-30173US	—	0.36% (30th)	—	no fix	2025-05-22	2 versions
CVE-2025-30169US	—	0.36% (30th)	—	no fix	2025-05-22	2 versions
CVE-2024-51553US	—	0.36% (29th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2025-30171US	—OT elevated	0.34% (27th)	—	no fix	2025-05-22	2 versions
CVE-2024-51543US	high7.5	0.33% (26th)	—	no fix	2024-12-05	2 versions
CVE-2024-51542US	high8.2	0.33% (26th)	—	no fix	2024-12-05	2 versions
CVE-2024-51552US	—	0.33% (26th)	—	no fix	2025-05-22	≤ 3.08.03
CVE-2024-51541US	high7.5	0.32% (25th)	—	no fix	2024-12-05	2 versions

showing 50 of 58

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')7 CVEs
CWE-1287Improper Validation of Specified Type of Input4 CVEs
CWE-36Absolute Path Traversal4 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-15External Control of System or Configuration Setting2 CVEs

sources (2)

Which sources assert this record, and when.

CHABB PSIRT (CSAF)32 CVEs
USCISA CSAF OT advisories (ICS)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan