CVE-2024-6209

🗓️ 05 Jul 2024 11:10:05Reported by ABBType

cve🔗 web.nvd.nist.gov👁 101 Views🌐 WEB

Unauthorized file access in ABB ASPECT - Enterprise v <=3.08.0

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	ASPECT Enterprise Databasefiledelete.php Arbitrary File Deletion Unauthorized Access	9 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-6209	5 Jul 202414:10	–	circl
CNNVD	ABB ASPECT Security Vulnerability	5 Jul 202400:00	–	cnnvd
Cvelist	CVE-2024-6209 unauthorized file access	5 Jul 202411:10	–	cvelist
Exploit DB	ABB Cylon Aspect 3.08.01 - Arbitrary File Delete	2 Apr 202500:00	–	exploitdb
EUVD	EUVD-2024-47987	5 Jul 202411:10	–	euvd
NCSC	Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series	6 Dec 202411:49	–	ncsc
NVD	CVE-2024-6209	5 Jul 202411:15	–	nvd
osv_cve	CVE-2024-6209	5 Jul 202411:15	–	osv_cve
Packet Storm	ABB Cylon Aspect 3.08.01 Arbitrary File Deletion	24 Sep 202400:00	–	packetstorm

NVD

Vulners

Vulnrichment

Node

AND

abb aspect-ent-12_firmwareRange≤3.08.01

abb aspect-ent-12Match-

Node

AND

abb aspect-ent-2_firmwareRange≤3.08.01

abb aspect-ent-2Match-

Node

AND

abb aspect-ent-256_firmwareRange≤3.08.01

abb aspect-ent-256Match-

Node

AND

abb aspect-ent-96_firmwareRange≤3.08.01

abb aspect-ent-96Match-

Node

AND

abb nexus-2128_firmwareRange≤3.08.01

abb nexus-2128Match-

Node

AND

abb nexus-2128-a_firmwareRange≤3.08.01

abb nexus-2128-aMatch-

Node

AND

abb nexus-2128-f_firmwareRange≤3.08.01

abb nexus-2128-fMatch-

Node

AND

abb nexus-2128-g_firmwareRange≤3.08.01

abb nexus-2128-gMatch-

Node

AND

abb nexus-264_firmwareRange≤3.08.01

abb nexus-264Match-

Node

AND

abb nexus-264-a_firmwareRange≤3.08.01

abb nexus-264-aMatch-

Node

AND

abb nexus-264-f_firmwareRange≤3.08.01

abb nexus-264-fMatch-

Node

AND

abb nexus-264-g_firmwareRange≤3.08.01

abb nexus-264-gMatch-

Node

AND

abb nexus-3-2128_firmwareRange≤3.08.01

abb nexus-3-2128Match-

Node

AND

abb nexus-3-264_firmwareRange≤3.08.01

abb nexus-3-264Match-

Node

AND

abb matrix-11_firmwareRange≤3.08.01

abb matrix-11Match-

Node

AND

abb matrix-216_firmwareRange≤3.08.01

abb matrix-216Match-

Node

AND

abb matrix-232_firmwareRange≤3.08.01

abb matrix-232Match-

Node

AND

abb matrix-264_firmwareRange≤3.08.01

abb matrix-264Match-

Node

AND

abb matrix-296_firmwareRange≤3.08.01

abb matrix-296Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT-Enterprise",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx
search	www.search.abb.com/library/Download.aspx

Parameter	Position	Path	Description	CWE
file	request body	/databaseFileDelete.php	Arbitrary file deletion via directory traversal in databaseFileDelete.php (CWE-552)	CWE-552
file0	request body	/databaseFileDelete.php	Arbitrary file deletion via directory traversal in databaseFileDelete.php (CWE-552)	CWE-552
delete0	request body	/databaseFileDelete.php	Arbitrary file deletion via directory traversal in databaseFileDelete.php (CWE-552)	CWE-552
total	request body	/databaseFileDelete.php	Arbitrary file deletion via directory traversal in databaseFileDelete.php (CWE-552)	CWE-552
submitDeleteForm	request body	/databaseFileDelete.php	Arbitrary file deletion via directory traversal in databaseFileDelete.php (CWE-552)	CWE-552
file	request body	/databasefiledelete.php	Arbitrary file deletion via directory traversal in databasefiledelete.php (CWE-552)	CWE-552
file0	request body	/databasefiledelete.php	Arbitrary file deletion via directory traversal in databasefiledelete.php (CWE-552)	CWE-552
delete0	request body	/databasefiledelete.php	Arbitrary file deletion via directory traversal in databasefiledelete.php (CWE-552)	CWE-552
total	request body	/databasefiledelete.php	Arbitrary file deletion via directory traversal in databasefiledelete.php (CWE-552)	CWE-552
submitDeleteForm	request body	/databasefiledelete.php	Arbitrary file deletion via directory traversal in databasefiledelete.php (CWE-552)	CWE-552

17 Jun 2026 08:17Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.5 - 10

CVSS 49.4

EPSS0.17159

SSVC

CWE-552