CVE-2025-53187

CVE-2025-53187 affects ABB ASPECT FW; root cause is debugging code included in the market release, enabling authentication bypass. Impact includes unauthenticated actions such as changing system time, accessing files, and invoking functions, potentially leading to unauthenticated RCE. All ASPECT ...

CVE-2025-53187 Unauthenticated RCE

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

CVE-2025-53187 Unauthenticated RCE

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

编号撤回

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. This CVE number has been withdrawn...

PT-2025-32566

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: A vulnerability exists in ABB Aspect. Recommendations: Update to version 3.08.04-s01 or later...

PT-2025-32562

Name of the Vulnerable Software and Affected Versions: ABB ASPECT versions prior to 3.08.04-s01 Description: An issue in configuration led to the inclusion of debugging code in the released version of ABB ASPECT, allowing attackers to bypass authentication. This can enable an attacker to change t...

PT-2025-32567

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: A missing authentication check exists for a critical function in ABB Aspect. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

ABB ASPECT 代码注入漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. A code injection vulnerability exists in ABB ASPECT versions prior to 3.08.04-s01, which stems from improper code generation controls and could lead to code injection...

ABB ASPECT 访问控制错误漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...

ABB ASPECT 访问控制错误漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...

PT-2025-32569

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication flaw exists in ABB Aspect, potentially allowing unauthorized access to critical functions. Recommendations: At the moment, there is no information about a newer...

PT-2025-32568

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication issue exists for a critical function in ABB Aspect. This allows unauthorized access to sensitive functionality. Recommendations: At the moment, there is no...

PT-2025-32565 · Abb · Abb Aspect

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: An authorization bypass exists due to a user-controlled key. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13766)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

ABB Multiple Catalog Traversal Vulnerability

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Servlet Injection Vulnerabilities in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

SQL Injection Vulnerabilities in Various ABB Products (CNVD-2025-13770)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13423)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13421)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

Weak Password Storage Vulnerability in Various ABB Products

ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A weak password storage vulnerability exists in several ABB products, which can be exploited by an attacker to caus...