Lucene search
+L

23810 matches found

OSV
OSV
•added 2024/12/05 1:15 p.m.•16 views

CVE-2024-51551

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS5.8AI score0.00446EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/05 12:59 p.m.•102 views

CVE-2024-51555

Summary: CVE-2024-51555 concerns default credential vulnerabilities in ABB ASPECT and related series. Publicly available default credentials allow access to ABB ASPECT devices due to design that does not require changing defaults (affected: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02;...

10CVSS9.6AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/05 12:59 p.m.•16 views

CVE-2024-51555 Force Change of Default Credentials

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS7.1AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/05 12:59 p.m.•35 views

CVE-2024-51555 Force Change of Default Credentials

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/05 12:58 p.m.•17 views

CVE-2024-51554 off-by-one-error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

9.1CVSS7.1AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/05 12:58 p.m.•45 views

CVE-2024-51554 off-by-one-error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

9.1CVSS0.00392EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/05 12:58 p.m.•81 views

CVE-2024-51554

CVE-2024-51554 affects ABB ASPECT on Linux (Enterprise, NEXUS Series, MATRIX Series) up to version 3.08.02, due to default credential usage that allows access with publicly available credentials. Root cause: default credentials not changed in installation/config and related UI/Web interfaces expo...

9.8CVSS9.3AI score0.00392EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/12/05 12:57 p.m.•94 views

CVE-2024-51551

Summary: CVE-2024-51551 affects ABB ASPECT family on Linux, with default credential vulnerabilities that permit access to ABB ASPECT – Enterprise v3.07.02, NEXUS Series v3.07.02, and MATRIX Series v3.07.02. The connected sources confirm the root cause as default credentials on Linux-facing compon...

10CVSS9.6AI score0.00446EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/05 12:57 p.m.•36 views

CVE-2024-51551 Default Credentials

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS0.00446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/05 12:57 p.m.•21 views

CVE-2024-51551 Default Credentials

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS7.1AI score0.00446EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•15 views

ABB ASPECT 安全漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that stems from the inclusion of a Use Default Credentials vulnerability in ASPECT on Linux...

9.8CVSS6.6AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•0 views

CVE-2024-51555: Use of Default Password

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS5.8AI score0.00421EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•18 views

PT-2024-9196 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.07.02 NEXUS Series version 3.07.02 MATRIX Series version 3.07.02 Description: The issue is related to the use of default passwords in the system, which does not require the installer to change them. This allo...

10CVSS7.4AI score0.00421EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•10 views

ABB ASPECT 安全漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that stems from the inclusion of a Use Default Credentials vulnerability...

10CVSS6.6AI score0.00421EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•13 views

ABB ASPECT 安全漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT suffers from a security vulnerability that originates from the inclusion of a Use Default Credentials vulnerability in ASPECT on Linux. An attacker could exploit this vulnerability to gain...

10CVSS6.9AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•13 views

PT-2024-9238 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.07.02 NEXUS Series version 3.07.02 MATRIX Series version 3.07.02 Description: The issue is related to default credential vulnerabilities in ASPECT on Linux, allowing access to the product using publicly...

10CVSS7.7AI score0.00446EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•3 views

CVE-2024-51554: Off-by-one Error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

9.8CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•0 views

CVE-2024-51551: Improper Validation of Specified Type of Input

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

10CVSS5.8AI score0.00446EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/04 3:22 p.m.•76 views

CVE-2024-11643

The CVE-2024-11643 entry concerns the WordPress plugin Accessibility by AllAccessible up to version 1.3.4. The connected sources confirm a missing capability check in AllAccessible_save_settings that lets authenticated users with Subscriber+ privileges modify arbitrary options, enabling privilege...

8.8CVSS8.8AI score0.00715EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/04 3:22 p.m.•16 views

CVE-2024-11643 Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessiblesavesettings' function in all versions up to, and including, 1.3.4. This makes it possible for...

8.8CVSS7.4AI score0.00715EPSS
SaveExploits0References3
Rows per page
Query Builder