Lucene search

CVE-2024-6298

🗓️ 05 Jul 2024 11:10:15Reported by ABBType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Improper Input Validation vulnerability in ABB ASPECT-Enterprise, NEXUS, and MATRIX on Linux allowing Remote Code Inclusio

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
NVD	CVE-2024-6298	5 Jul 202411:15	–	nvd
RedhatCVE	CVE-2024-6298	5 Feb 202503:01	–	redhatcve
Circl	CVE-2024-6298	7 Jan 202511:00	–	circl
Cvelist	CVE-2024-6298 remote code execution	5 Jul 202411:06	–	cvelist
0day.today	ABB Cylon Aspect 3.08.01 Remote Code Execution Vulnerability	24 Sep 202400:00	–	zdt
Vulnrichment	CVE-2024-6298 remote code execution	5 Jul 202411:06	–	vulnrichment
Packet Storm	ABB Cylon Aspect 3.08.01 Remote Code Execution	24 Sep 202400:00	–	packetstorm
Zero Science Lab	ABB Cylon Aspect 3.08.01 (bigUpload.php) Remote Code Execution	23 Sep 202400:00	–	zeroscience
Exploit DB	ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)	2 Apr 202500:00	–	exploitdb
ICS	ABB ASPECT System	3 Jul 202400:30	–	ics

Nvd

Node

abb aspect-ent-12_firmwareRange≤3.08.01

AND

abb aspect-ent-12Match-

Node

abb aspect-ent-2_firmwareRange≤3.08.01

AND

abb aspect-ent-2Match-

Node

abb aspect-ent-256_firmwareRange≤3.08.01

AND

abb aspect-ent-256Match-

Node

abb aspect-ent-96_firmwareRange≤3.08.01

AND

abb aspect-ent-96Match-

Node

abb nexus-2128_firmwareRange≤3.08.01

AND

abb nexus-2128Match-

Node

abb nexus-2128-a_firmwareRange≤3.08.01

AND

abb nexus-2128-aMatch-

Node

abb nexus-2128-f_firmwareRange≤3.08.01

AND

abb nexus-2128-fMatch-

Node

abb nexus-2128-g_firmwareRange≤3.08.01

AND

abb nexus-2128-gMatch-

Node

abb nexus-264_firmwareRange≤3.08.01

AND

abb nexus-264Match-

Node

abb nexus-264-a_firmwareRange≤3.08.01

AND

abb nexus-264-aMatch-

Node

abb nexus-264-f_firmwareRange≤3.08.01

AND

abb nexus-264-fMatch-

Node

abb nexus-264-g_firmwareRange≤3.08.01

AND

abb nexus-264-gMatch-

Node

abb nexus-3-2128_firmwareRange≤3.08.01

AND

abb nexus-3-2128Match-

Node

abb nexus-3-264_firmwareRange≤3.08.01

AND

abb nexus-3-264Match-

Node

abb matrix-11_firmwareRange≤3.08.01

AND

abb matrix-11Match-

Node

abb matrix-216_firmwareRange≤3.08.01

AND

abb matrix-216Match-

Node

abb matrix-232_firmwareRange≤3.08.01

AND

abb matrix-232Match-

Node

abb matrix-264_firmwareRange≤3.08.01

AND

abb matrix-264Match-

Node

abb matrix-296_firmwareRange≤3.08.01

AND

abb matrix-296Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT-Enterprise",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series",
    "vendor": "ABB",
    "versions": [
      {
        "lessThanOrEqual": "3.08.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx
search	www.search.abb.com/library/Download.aspx

Parameter	Position	Path	Description	CWE
action	request body	/bigUpload.php	The endpoint bigUpload.php allows remote code execution through unauthenticated upload of files due to improper input validation.	CWE-1287
key	request body	/bigUpload.php	The endpoint bigUpload.php allows remote code execution through unauthenticated upload of files due to improper input validation.	CWE-1287

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jul 2024 11:15Current

9.7High risk

Vulners AI Score9.7

CVSS39.8 - 10

CVSS49.4

EPSS0.07863

SSVC

CWE-1287