CVE-2025-30173 Admin Authorized File Upload

File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-30173

Summary: CVE-2025-30173 affects ABB’s ASPECT product line (ASPECT-Enterprise, NEXUS Series, MATRIX Series) up to version 3.08.03. The issue is a file upload vulnerability that can be triggered if a session administrator credentials are compromised. According to sources, exploitation is a network ...

CVE-2025-30172

The CVE-2025-30172 entry covers Remote Code Execution in ABB’s ASPECT product line (ASPECT-Enterprise, NEXUS Series, MATRIX Series) via compromised session administrator credentials, affecting versions through 3.08.03. The connected documents provide concrete details: the affected software is ABB...

CVE-2025-30172 Admin Authorized Remote Code Execution

Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-30172 Admin Authorized Remote Code Execution

Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-30171 Admin Authorized System File Deletion

System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-30171

This CVE affects ABB ASPECT-Enterprise (through 3.08.03), ABB NEXUS Series (through 3.08.03), and ABB MATRIX Series (through 3.08.03). The vulnerability is a System File Deletion issue where, if session administrator credentials are compromised, an attacker can delete system files. CVSS metrics s...

CVE-2025-30170

CVE-2025-30170 is an information disclosure vulnerability in ABB ASPECT product line (ASPECT-Enterprise, NEXUS Series, MATRIX Series) affecting versions up to 3.08.03. The issue arises from exposure of file path, file size, or file existence information, which can be accessed if a session adminis...

CVE-2025-30170 Admin Authorized Exposure of file path, file size or file existence

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through...

CVE-2025-30170 Admin Authorized Exposure of file path, file size or file existence

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through...

CVE-2025-2409

The CVE-2025-2409 entry describes a file-corruption vulnerability in ABB ASPECT product line that could let an attacker overwrite system files when session administrator credentials are compromised. Affected products are ASPECT-Enterprise (up to version 3.08.03), NEXUS Series (up to 3.08.03), and...

CVE-2025-2409 Admin Authorized System File corruption

File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-2409 Admin Authorized System File corruption

File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-2410 Admin Authorized Port (iptables) manipulation (open/close/disable ports)

Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2025-2410

The CVE-2025-2410 issue affects ABB ASPECT product line (ASPECT-Enterprise, NEXUS Series, MATRIX Series) up to version 3.08.03. The vulnerability involves port manipulation that could allow an attacker to control TCP/IP port access when session administrator credentials are compromised. Affected ...

CVE-2025-2410 Admin Authorized Port (iptables) manipulation (open/close/disable ports)

Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2024-9639 Authenticated Remote Code Execution

Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2024-9639

CVE-2024-9639 describes Remote Code Execution in ABB ASPECT line when session administrator credentials are compromised. Affected products include ASPECT-Enterprise, NEXUS Series, and MATRIX Series, up to version 3.08.03. The underlying issue is tied to authentication/context boundary weaknesses ...

CVE-2024-9639 Authenticated Remote Code Execution

Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2024-48853

An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...