CVE-2023-0635

🗓️ 05 Jun 2023 03:42:04Reported by ABBType

Improper Privilege Management allows privilege escalation in ABB products before version 3.07.01.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems relates to insecure privilege management, allowing attackers to elevate their privileges to the root level.	6 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-0635	5 Jun 202307:33	–	circl
CNNVD	ABB ASPECT 安全漏洞	5 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-0635 Privilege escalation to root	5 Jun 202303:42	–	cvelist
EUVD	EUVD-2023-12669	3 Oct 202520:07	–	euvd
NVD	CVE-2023-0635	5 Jun 202304:15	–	nvd
OSV	CVE-2023-0635	5 Jun 202304:15	–	osv
Prion	Privilege escalation	5 Jun 202304:15	–	prion
Positive Technologies	PT-2023-2999 · Unknown · Nexus Series +2	5 Jun 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-0635 Privilege escalation to root	5 Jun 202303:42	–	vulnrichment

NVD

Node

abb aspect-ent-2_firmwareRange3.0.0–3.07.01

AND

abb aspect-ent-2Match-

Node

abb aspect-ent-12_firmwareRange3.0.0–3.07.01

AND

abb aspect-ent-12Match-

Node

abb aspect-ent-256_firmwareRange3.0.0–3.07.01

AND

abb aspect-ent-256Match-

Node

abb aspect-ent-96_firmwareRange3.0.0–3.07.01

AND

abb aspect-ent-96Match-

Node

abb nexus-2128_firmwareRange3.0.0–3.07.01

AND

abb nexus-2128Match-

Node

abb nexus-2128-a_firmwareRange3.0.0–3.07.01

AND

abb nexus-2128-aMatch-

Node

abb nexus-2128-g_firmwareRange3.0.0–3.07.01

AND

abb nexus-2128-gMatch-

Node

abb nexus-2128-f_firmwareRange3.0.0–3.07.01

AND

abb nexus-2128-fMatch-

Node

abb nexus-3-2128_firmwareRange3.0.0–3.07.01

AND

abb nexus-3-2128Match-

Node

abb nexus-3-264_firmwareRange3.0.0–3.07.01

AND

abb nexus-3-264Match-

Node

abb nexus-264_firmwareRange3.0.0–3.07.01

AND

abb nexus-264Match-

Node

abb nexus-264-a_firmwareRange3.0.0–3.07.01

AND

abb nexus-264-aMatch-

Node

abb nexus-264-g_firmwareRange3.0.0–3.07.01

AND

abb nexus-264-gMatch-

Node

abb nexus-264-f_firmwareRange3.0.0–3.07.01

AND

abb nexus-264-fMatch-

Node

abb matrix-216_firmwareRange3.0.0–3.07.01

AND

abb matrix-216Match-

Node

abb matrix-232_firmwareRange3.0.0–3.07.01

AND

abb matrix-232Match-

Node

abb matrix-296_firmwareRange3.0.0–3.07.01

AND

abb matrix-296Match-

Node

abb matrix-264_firmwareRange3.0.0–3.07.01

AND

abb matrix-264Match-

Node

abb matrix-11_firmwareRange3.0.0–3.07.01

AND

abb matrix-11Match-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2CQG103201S3021",
      "2CQG103202S3021",
      "2CQG103203S3021",
      "2CQG103204S3021"
    ],
    "platforms": [
      "ASPECT®-Enterprise",
      "Linux"
    ],
    "product": "ASPECT®-Enterprise",
    "vendor": "ABB Ltd.",
    "versions": [
      {
        "lessThan": "3.07.01",
        "status": "affected",
        "version": "3.0;0",
        "versionType": "update"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2CQG100102R2021",
      "2CQG100104R2021",
      "2CQG100105R2021",
      "2CQG100106R2021",
      "2CQG100110R2021",
      "2CQG100112R2021",
      "2CQG100103R2021",
      "2CQG100107R2021",
      "2CQG100108R2021",
      "2CQG100109R2021",
      "2CQG100111R2021",
      "2CQG100113R2021"
    ],
    "platforms": [
      "NEXUS Series",
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB Ltd.",
    "versions": [
      {
        "lessThan": "3.07.01",
        "status": "affected",
        "version": "3.0;0",
        "versionType": "update"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2CQG100102R1021",
      "2CQG100103R1021",
      "2CQG100104R1021",
      "2CQG100105R1021",
      "2CQG100106R1021"
    ],
    "platforms": [
      "MATRIX Series",
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB Ltd.",
    "versions": [
      {
        "lessThan": "3.07.01",
        "status": "affected",
        "version": "3.0;0",
        "versionType": "update"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

17 Jun 2026 05:25Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.8 - 9.8

EPSS0.00374

SSVC

CWE-1391