CVE-2024-51545

CVE-2024-51545 affects ABB ASPECT - Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. The issue is a username enumeration vulnerability that allows access to application-level username add, delete, modify and list functions. Root cause details are not fully specified in the ...

CVE-2024-48843

CVE-2024-48843 affects ABB ASPECT – Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. The connected sources consistently describe a Denial of Service vulnerability that can lead to device service disruptions. The root cause details are not explicitly enumerated beyond the Do...

CVE-2024-48839

Summary (CVE-2024-48839) : The ABB Cylon Aspect family (ASPECT-Enterprise v3.08.02, NEXUS v3.08.02, MATRIX v3.08.02) contains an improper input validation flaw that enables Remote Code Execution. Exploitation details in connected sources show authenticated command injection via endpoints like bbm...

CVE-2024-51550

CVE-2024-51550 affects ABB ASPECT, NEXUS Series, and MATRIX Series (firmware up to 3.08.02). The vulnerability arises from Data Validation / Data Sanitization issues in Linux, allowing unvalidated data injection into an Aspect device. Connected sources document a Remote Code Execution path: an au...

CVE-2024-48845

CVE-2024-48845 affects ABB ASPECT family (Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02). The root cause is weak password reset/weak password policy that could allow storage of weak credentials and unauthorized admin/application access. Public sources confirm a set of related...

CVE-2024-51547

CVE-2024-51547 affects ABB ASPECT-Enterprise, ABB NEXUS Series and ABB MATRIX Series (firmware up to 3.08.03). The vulnerability stems from hard-coded credentials embedded in multiple components, enabling unauthorized access and potentially compromising confidentiality, integrity and availability...

CVE-2024-48840

ABB CVE-2024-48840 affects ABB ASPECT - Enterprise v3.08.02, NEXUS Series v3.08.02 and MATRIX Series v3.08.02. The vulnerability is described as Unauthorized Access vulnerabilities that allow Remote Code Execution. Exploit-DB documents an unauthenticated command execution path via deployStart.php...

CVE-2024-51546

CVE-2024-51546 affects ABB ASPECT Enterprise v3.08.02, NEXUS Series v3.08.02 and MATRIX Series v3.08.02, with credentials disclosure enabling access to on-board project backup bundles. Connected sources (including Exploit DB, Red Hat/US-CISA advisories and NC SC) describe this as a cookie/credent...

CVE-2024-6784

CVE-2024-6784 is an SSRF vulnerability impacting ABB ASPECT family components. Affected: ABB ASPECT – Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02. Root cause: server-side request forgery enabling access to unauthorized resources and potential information disclosure. Documen...

CVE-2024-6298

CVE-2024-6298 affects ABB ASPECT Enterprise, NEXUS Series, and MATRIX Series up to firmware 3.08.01. The root cause is improper input validation in the uploadFile() handler (bigUpload.php), enabling directory traversal and remote code execution by writing arbitrary files. Exploitation has been de...

CVE-2024-51543

CVE-2024-51543 is an Information Disclosure vulnerability affecting ABB ASPECT – Enterprise, NEXUS Series, and MATRIX Series, with affected version 3.08.02 and prior (per multiple sources). The root cause involves unauthorized access to configuration information exposed via web interfaces and rel...

CVE-2024-11316

The CVE-2024-11316 issue affects ABB ASPECT – Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. Connected sources describe a Filesize Check vulnerability where improper handling allows a malicious user to bypass size limits and overload the product via remote exploitation. P...

CVE-2024-51549

CVE-2024-51549 concerns an Absolute File Traversal in ABB ASPECT, NEXUS Series, and MATRIX Series (up to version 3.08.02). Connected sources describe an issue where directory path name handling allowed access to unintended resources, with potential for unauthorized file access and modification. A...

CVE-2024-48847

The CVE-2024-48847 entry concerns an MD5 Checksum Bypass vulnerability affecting ABB ASPECT - Enterprise v3.08.01 , NEXUS Series v3.08.01 , and MATRIX Series v3.08.01 . Connected sources confirm a weakness in how an application dependency calculates or validates MD5 hashes, with potential impact ...

CVE-2024-48846

CVE-2024-48846 affects ABB ASPECT family (Enterprise 3.08.02; NEXUS Series 3.08.02; MATRIX Series 3.08.02). A CSRF flaw allows unauthorized actions or data exposure via crafted HTTP requests, potentially requiring a logged-in session to perform privileged actions; described in multiple sources (E...

CVE-2024-51544

CVE-2024-51544 affects ABB ASPECT and related series (Enterprise v3.08.02; NEXUS v3.08.02; MATRIX v3.08.02). The issue is described as a Service Control vulnerability that allows access to service restart requests and VM configuration settings. Connected sources confirm the affected versions and ...

CVE-2024-48844

CVE-2024-48844 is a Denial of Service vulnerability affecting ABB ASPECT – Enterprise 3.08.02, NEXUS Series 3.08.02, and MATRIX Series 3.08.02. Connected sources describe an off-by-one error in a PHP script (escDevicesUpdate.php) that can cause undefined behavior and crash the service, leading to...

CVE-2024-6516

CVE-2024-6516 corresponds to authenticated cross-site scripting vulnerabilities in ABB Cylon Aspect platform components. Connected sources confirm affected products and versions: ABB ASPECT – Enterprise 3.08.02; NEXUS Series 3.08.02; MATRIX Series 3.08.02. Technical details across exploits indica...

CVE-2023-0635

ABB ASPECT-family devices (ASPECT-Enterprise, NEXUS Series, MATRIX Series) are affected by an unauthenticated OS command injection that enables remote code execution via networkDiagAjax.php (host param). Zero Science Lab cites affected firmware

CVE-2024-51551

Summary: CVE-2024-51551 affects ABB ASPECT family on Linux, with default credential vulnerabilities that permit access to ABB ASPECT – Enterprise v3.07.02, NEXUS Series v3.07.02, and MATRIX Series v3.07.02. The connected sources confirm the root cause as default credentials on Linux-facing compon...

CVE-2024-6515

Summary: CVE-2024-6515 affects ABB ASPECT – Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. The issue involves the web browser interface potentially manipulating usernames/passwords in clear text or Base64, increasing the risk of credential exposure. Connected sources also...

CVE-2024-6209

CVE-2024-6209 affects ABB ASPECT family (Enterprise, NEXUS, MATRIX) up to v3.08.01. Pre-authentication directory traversal and input handling flaws in the web server enable unauthorized file access, with exploit paths such as databasefiledelete.php potentially allowing arbitrary file deletion (an...

CVE-2024-51548

CVE-2024-51548 is an active vulnerability affecting ABB ASPECT – Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02, caused by dangerous file upload that can allow uploading of malicious scripts. Multiple connected sources confirm the issue and list affected products and versi...

CVE-2024-11317

CVE-2024-11317 affects ABB ASPECT family (Enterprise, NEXUS Series, MATRIX Series) with firmware up to 3.08.02. The vulnerability is a PHP Session Fixation issue that can allow an attacker to fix a user’s session ID before login, potentially enabling session takeover; in ABB/BMS contexts this may...

CVE-2024-51541

CVE-2024-51541 describes a Local File Inclusion issue affecting ABB ASPECT—Enterprise, NEXUS Series, and MATRIX Series up to version 3.08.02. The root cause is improper handling of file names for include/require in the web interface, enabling an attacker on the network to access sensitive system ...

CVE-2024-51542

CVE-2024-51542 concerns ABB ASPECT family components: ABB ASPECT Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. The issue is described as Configuration Download vulnerabilities that allow access to dependency configuration information (a local/remote access risk depending...

CVE-2023-0636

CVE-2023-0636 : ABB ASPECT family (ASPECT-Enterprise, NEXUS Series, MATRIX Series) suffers an improper input validation that enables command injection and remote code execution. Affected versions: ASPECT-Enterprise 3.0.0–3.07.0; NEXUS Series 3.0.0–3.07.0; MATRIX Series 3.0.0–3.07.1. Remediation: ...

CVE-2024-51554

CVE-2024-51554 affects ABB ASPECT on Linux (Enterprise, NEXUS Series, MATRIX Series) up to version 3.08.02, due to default credential usage that allows access with publicly available credentials. Root cause: default credentials not changed in installation/config and related UI/Web interfaces expo...

CVE-2024-4007

ABB ASPECT, NEXUS Series, and MATRIX Series (firmware up to 3.07) contain default/hard-coded credentials installed with the package, enabling login to misconfigured devices. Root cause: credentials embedded in the installer; attack surface includes Internet-adjacent exposure per public advisories...