Lucene search

[email protected]CVE-2024-4007

HistoryJul 01, 2024 - 1:15 p.m.

CVE-2024-4007

2024-07-0113:15:06

CWE-1392

[email protected]

web.nvd.nist.gov

cve-2024-4007

abb aspect

nexus series

matrix series

install package

unauthorized login

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:U/V:D/RE:L

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

CNA Affected

[
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/aspect-enterprise",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT Enterprise (ASP-ENT-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  },
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/nexus-series",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series (NEX-2x, NEXUS-3-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  },
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/matrix",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series(MAT-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  }
]

References

search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:U/V:D/RE:L

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for CVE-2024-4007

nvd1 cvelist1