4106 matches found
CVE-2024-6298 remote code execution
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...
CVE-2024-6298
The ABB ASPECT , NEXUS Series , and MATRIX Series embedded network controllers (specifically firmware versions
CVE-2024-6209: Files or Directories Accessible to External Parties
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized...
PT-2024-28630 · Unknown · Matrix-Appservice-Irc
Name of the Vulnerable Software and Affected Versions: matrix-appservice-irc versions prior to 2.0.1 Description: The issue arises from the reliance on the Matrix homeserver-provided timestamp to determine user access to events. A malicious Matrix homeserver can fabricate this timestamp to trick...
CVE-2024-39691: Improper Handling of Insufficient Permissions or Privileges
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when...
CVE-2024-4007
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007 Hard coded default credential contained in install package
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007 Hard coded default credential contained in install package
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
CVE-2024-4007
ABB ASPECT, NEXUS Series, and MATRIX Series (firmware up to 3.07) contain default/hard-coded credentials installed with the package, enabling login to misconfigured devices. Root cause: credentials embedded in the installer; attack surface includes Internet-adjacent exposure per public advisories...
CVE-2024-4007: Use of Default Credentials
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...
Various ABB products Security breaches
ABB ASPECT and others are products of ABB Switzerland.ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A security vulnerability exists in several ABB products that...
PT-2024-6673 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 Description: The issue is related to the use of default credentials in the installation package of the affected products, allowing an attacker to log in to wrongly configured product...
GHSA-Q6C7-56CQ-G2WM Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec
Impact This issue is only relevant to clusters provisioned using RKE1 with secrets encryption configuration enabled. A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled please see the RKE documentation. When...
OPENSUSE-SU-2024:13320-1 matrix-synapse-1.94.0-2.1 on GA media
These are all security issues fixed in the matrix-synapse-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11649-1 matrix-synapse-1.47.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.47.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12160-1 matrix-synapse-1.61.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.61.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11041-1 matrix-synapse-1.43.0-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.43.0-1.1 package on the GA media of openSUSE Tumbleweed...