CVE-2024-51541

🗓️ 05 Dec 2024 12:45:09Reported by ABBType

Local File Inclusion vulnerability in ABB ASPECT, NEXUS Series, MATRIX Series v3.08.0

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, MATRIX Series, arises from improper handling of file names for PHP functions like include or require. This allows attackers to gain access to confidential information.	9 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-51541	5 Dec 202413:22	–	circl
CNNVD	ABB ASPECT 安全漏洞	5 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-51541 Local File Inclusion	5 Dec 202412:45	–	cvelist
EUVD	EUVD-2024-45746	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series	6 Dec 202411:49	–	ncsc
NVD	CVE-2024-51541	5 Dec 202413:15	–	nvd
Positive Technologies	PT-2024-9184 · Abb · Abb Aspect +2	5 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-51541	5 Feb 202503:15	–	redhatcve
Vulnrichment	CVE-2024-51541 Local File Inclusion	5 Dec 202412:45	–	vulnrichment

NVD

Node

abb aspect-ent-12_firmwareRange<3.08.03

AND

abb aspect-ent-12Match-

Node

abb aspect-ent-2Match-

AND

abb aspect-ent-2_firmwareRange<3.08.03

Node

abb aspect-ent-256Match-

AND

abb aspect-ent-256_firmwareRange<3.08.03

Node

abb aspect-ent-96Match-

AND

abb aspect-ent-96_firmwareRange<3.08.03

Node

abb nexus-2128Match-

AND

abb nexus-2128_firmwareRange<3.08.03

Node

abb nexus-2128-aMatch-

AND

abb nexus-2128-a_firmwareRange<3.08.03

Node

abb nexus-2128-fMatch-

AND

abb nexus-2128-f_firmwareRange<3.08.03

Node

abb nexus-2128-gMatch-

AND

abb nexus-2128-g_firmwareRange<3.08.03

Node

abb nexus-264Match-

AND

abb nexus-264_firmwareRange<3.08.03

Node

abb nexus-264-aMatch-

AND

abb nexus-264-a_firmwareRange<3.08.03

Node

abb nexus-264-fMatch-

AND

abb nexus-264-f_firmwareRange<3.08.03

Node

abb nexus-264-gMatch-

AND

abb nexus-264-g_firmwareRange<3.08.03

Node

abb nexus-3-2128Match-

AND

abb nexus-3-2128_firmwareRange<3.08.03

Node

abb nexus-3-264_firmwareRange<3.08.03

AND

abb nexus-3-264Match-

Node

abb matrix-11_firmwareRange<3.08.03

AND

abb matrix-11Match-

Node

abb matrix-216_firmwareRange<3.08.03

AND

abb matrix-216Match-

Node

abb matrix-232_firmwareRange<3.08.03

AND

abb matrix-232Match-

Node

abb matrix-264_firmwareRange<3.08.03

AND

abb matrix-264Match-

Node

abb matrix-296_firmwareRange<3.08.03

AND

abb matrix-296Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT-Enterprise",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

27 Feb 2025 17:18Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.5 - 8.2

CVSS 48.8

EPSS0.00289

SSVC

CWE-98