CVE-2024-48845

🗓️ 05 Dec 2024 12:42:14Reported by ABBType

cve🔗 web.nvd.nist.gov👁 83 Views🌐 WEB

Weak Password Reset Rules vulnerabilities found in ABB ASPECT - Enterprise v3.07.02, NEXUS Series v3.07.02, and MATRIX Series v3.07.0

Reporter	Title	Published	Views	Family All 15
0day.today	ABB Cylon Aspect 3.07.02 userManagement.php Weak Password Policy Vulnerability	1 Jan 202500:00	–	zdt
BDU FSTEC	The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems is related to weak password requirements. This allows unauthorized access by intruders, enabling them to gain unauthorized access to administrators or applications.	9 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-48845	5 Dec 202413:07	–	circl
CNNVD	ABB ASPECT 安全漏洞	5 Dec 202400:00	–	cnnvd
CNVD	Unspecified Vulnerability in ABB ASPECT	13 Dec 202400:00	–	cnvd
Cvelist	CVE-2024-48845 Weak Password Rules/Strength	5 Dec 202412:42	–	cvelist
Exploit DB	ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy	15 Apr 202500:00	–	exploitdb
EUVD	EUVD-2024-43216	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series	6 Dec 202411:49	–	ncsc
NVD	CVE-2024-48845	5 Dec 202413:15	–	nvd

NVD

Node

abb aspect-ent-2_firmwareRange<3.08.03

AND

abb aspect-ent-2Match-

Node

abb aspect-ent-256_firmwareRange<3.08.03

AND

abb aspect-ent-256Match-

Node

abb aspect-ent-96_firmwareRange<3.08.03

AND

abb aspect-ent-96Match-

Node

abb nexus-2128_firmwareRange<3.08.03

AND

abb nexus-2128Match-

Node

abb nexus-2128-a_firmwareRange<3.08.03

AND

abb nexus-2128-aMatch-

Node

abb nexus-2128-f_firmwareRange<3.08.03

AND

abb nexus-2128-fMatch-

Node

abb nexus-2128-g_firmwareRange<3.08.03

AND

abb nexus-2128-gMatch-

Node

abb nexus-264_firmwareRange<3.08.03

AND

abb nexus-264Match-

Node

abb nexus-264-a_firmwareRange<3.08.03

AND

abb nexus-264-aMatch-

Node

abb nexus-264-g_firmwareRange<3.08.03

AND

abb nexus-264-gMatch-

Node

abb nexus-3-2128_firmwareRange<3.08.03

AND

abb nexus-3-2128Match-

Node

abb aspect-ent-12_firmwareRange≤3.07.02

AND

abb aspect-ent-12Match-

Node

abb nexus-264-f_firmwareRange<3.08.03

AND

abb nexus-264-fMatch-

Node

abb nexus-3-264_firmwareRange≤3.07.02

AND

abb nexus-3-264Match-

Node

abb matrix-11_firmwareRange≤3.07.02

AND

abb matrix-11Match-

Node

abb matrix-216_firmwareRange≤3.07.02

AND

abb matrix-216Match-

Node

abb matrix-232_firmwareRange≤3.07.02

AND

abb matrix-232Match-

Node

abb matrix-264_firmwareRange≤3.07.02

AND

abb matrix-264Match-

Node

abb matrix-296_firmwareRange≤3.07.02

AND

abb matrix-296Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT-Enterprise",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.07.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.07.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.07.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

Parameter	Position	Path	Description	CWE
USER	request body	192.168.73.31/userManagement.php	Weak password policy vulnerability allowing creation of weak credentials via userManagement.php form submission.	CWE-521
PASSWORD	request body	192.168.73.31/userManagement.php	Weak password policy vulnerability allowing creation of weak credentials via userManagement.php form submission.	CWE-521
ACTION	request body	192.168.73.31/userManagement.php	Weak password policy vulnerability allowing creation of weak credentials via userManagement.php form submission.	CWE-521

17 Jun 2026 07:58Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.4 - 9.8

CVSS 49.3

EPSS0.01798

SSVC

CWE-521