CVE-2024-51544

🗓️ 05 Dec 2024 12:48:32Reported by ABBType

cve🔗 web.nvd.nist.gov👁 110 Views🌐 WEB

Service Control vulnerabilities in ABB ASPECT - Enterprise, NEXUS Series, MATRIX Series v3.08.0

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	ASPECT Enterprise Embedded Network Control Unauthenticated Access	10 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-51544	5 Dec 202413:22	–	circl
CNNVD	ABB ASPECT security vulnerabilities	5 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-51544 Service Control	5 Dec 202412:48	–	cvelist
EUVD	EUVD-2024-45749	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series	6 Dec 202411:49	–	ncsc
NVD	CVE-2024-51544	5 Dec 202413:15	–	nvd
osv_cve	CVE-2024-51544	5 Dec 202413:15	–	osv_cve
Positive Technologies	PT-2024-9240	5 Dec 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-51544: External Control of System or Configuration Setting	5 Dec 202400:00	–	rapid7

NVD

Vulners

Vulnrichment

Node

AND

abb aspect-ent-12_firmwareRange<3.08.03

abb aspect-ent-12Match-

Node

AND

abb aspect-ent-2Match-

abb aspect-ent-2_firmwareRange<3.08.03

Node

AND

abb aspect-ent-256Match-

abb aspect-ent-256_firmwareRange<3.08.03

Node

AND

abb aspect-ent-96Match-

abb aspect-ent-96_firmwareRange<3.08.03

Node

AND

abb nexus-2128Match-

abb nexus-2128_firmwareRange<3.08.03

Node

AND

abb nexus-2128-aMatch-

abb nexus-2128-a_firmwareRange<3.08.03

Node

AND

abb nexus-2128-fMatch-

abb nexus-2128-f_firmwareRange<3.08.03

Node

AND

abb nexus-2128-gMatch-

abb nexus-2128-g_firmwareRange<3.08.03

Node

AND

abb nexus-264Match-

abb nexus-264_firmwareRange<3.08.03

Node

AND

abb nexus-264-aMatch-

abb nexus-264-a_firmwareRange<3.08.03

Node

AND

abb nexus-264-fMatch-

abb nexus-264-f_firmwareRange<3.08.03

Node

AND

abb nexus-264-gMatch-

abb nexus-264-g_firmwareRange<3.08.03

Node

AND

abb nexus-3-2128Match-

abb nexus-3-2128_firmwareRange<3.08.03

Node

AND

abb nexus-3-264_firmwareRange<3.08.03

abb nexus-3-264Match-

Node

AND

abb matrix-11_firmwareRange<3.08.03

abb matrix-11Match-

Node

AND

abb matrix-216_firmwareRange<3.08.03

abb matrix-216Match-

Node

AND

abb matrix-232_firmwareRange<3.08.03

abb matrix-232Match-

Node

AND

abb matrix-264_firmwareRange<3.08.03

abb matrix-264Match-

Node

AND

abb matrix-296_firmwareRange<3.08.03

abb matrix-296Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT-Enterprise",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.02",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

Parameter	Position	Path	Description	CWE
HEAPMIN	request body	/aspectMemory.php	Authenticated vulnerability allowing arbitrary Java heap memory parameters (HEAPMIN/HEAPMAX) to be set via aspectMemory.php, written to /usr/local/aam/etc/javamem, enabling DoS or crashes due to misconfiguration.	CWE-15
HEAPMAX	request body	/aspectMemory.php	Authenticated vulnerability allowing arbitrary Java heap memory parameters (HEAPMIN/HEAPMAX) to be set via aspectMemory.php, written to /usr/local/aam/etc/javamem, enabling DoS or crashes due to misconfiguration.	CWE-15
ACTION	request body	/aspectMemory.php	Authenticated vulnerability allowing arbitrary Java heap memory parameters (HEAPMIN/HEAPMAX) to be set via aspectMemory.php, written to /usr/local/aam/etc/javamem, enabling DoS or crashes due to misconfiguration.	CWE-15

17 Jun 2026 08:05Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.2

CVSS 48.8

EPSS0.13237

SSVC

CWE-15