PT-2025-32568

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication issue exists for a critical function in ABB Aspect. This allows unauthorized access to sensitive functionality. Recommendations: At the moment, there is no...

PT-2025-32562

Name of the Vulnerable Software and Affected Versions: ABB ASPECT versions prior to 3.08.04-s01 Description: An issue in configuration led to the inclusion of debugging code in the released version of ABB ASPECT, allowing attackers to bypass authentication. This can enable an attacker to change t...

ABB ASPECT 访问控制错误漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...

PT-2025-32569

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication flaw exists in ABB Aspect, potentially allowing unauthorized access to critical functions. Recommendations: At the moment, there is no information about a newer...

CVE-2025-7679: Missing Authentication for Critical Function

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT...

CVE-2025-53187: Authentication Bypass Using an Alternate Path or Channel

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

ABB ASPECT 访问控制错误漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...

PT-2025-32567

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: A missing authentication check exists for a critical function in ABB Aspect. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

CVE-2025-7677: Buffer Copy without Checking Size of Input

A denial-of-service DoS attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT...

编号撤回

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. This CVE number has been withdrawn...

PT-2025-32565 · Abb · Abb Aspect

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: An authorization bypass exists due to a user-controlled key. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2025-3777 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2025-3777 Source advisory:...

Path Traversal Vulnerability in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Code Injection Vulnerability in Various ABB Products (CNVD-2025-13767)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13421)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Servlet Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Code Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications...

ABB Multiple Catalog Traversal Vulnerability

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

SQL Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13423)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...