3730 matches found
EUVD-2024-47987
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized...
CVE-2024-6298 remote code execution
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...
CVE-2024-6298 remote code execution
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...
CVE-2024-6298
CVE-2024-6298 affects ABB ASPECT Enterprise, NEXUS Series, and MATRIX Series up to firmware 3.08.01. The root cause is improper input validation in the uploadFile() handler (bigUpload.php), enabling directory traversal and remote code execution by writing arbitrary files. Exploitation has been de...
PT-2024-28630 · Unknown · Matrix-Appservice-Irc
Name of the Vulnerable Software and Affected Versions: matrix-appservice-irc versions prior to 2.0.1 Description: The issue arises from the reliance on the Matrix homeserver-provided timestamp to determine user access to events. A malicious Matrix homeserver can fabricate this timestamp to trick...
CVE-2024-4007
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007 Hard coded default credential contained in install package
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007 Hard coded default credential contained in install package
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007
ABB ASPECT, NEXUS Series, and MATRIX Series (firmware up to 3.07) contain default/hard-coded credentials installed with the package, enabling login to misconfigured devices. Root cause: credentials embedded in the installer; attack surface includes Internet-adjacent exposure per public advisories...
Various ABB products Security breaches
ABB ASPECT and others are products of ABB Switzerland.ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A security vulnerability exists in several ABB products that...
PT-2024-6673 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 Description: The issue is related to the use of default credentials in the installation package of the affected products, allowing an attacker to log in to wrongly configured product...
GHSA-Q6C7-56CQ-G2WM Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec
Impact This issue is only relevant to clusters provisioned using RKE1 with secrets encryption configuration enabled. A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled please see the RKE documentation. When...
OPENSUSE-SU-2024:13039-1 matrix-synapse-1.85.2-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.85.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11649-1 matrix-synapse-1.47.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.47.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13270-1 matrix-synapse-1.93.0-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.93.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13897-1 matrix-synapse-1.105.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.105.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12160-1 matrix-synapse-1.61.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.61.1-1.1 package on the GA media of openSUSE Tumbleweed...