ABB Nexus 2128 vulnerabilities
29 vulnerabilities
Known vulnerabilities in ABB Nexus 2128, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-51543abb · aspect-ent-12_firmware +21 moreInformation DisclosureAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.33%CriticalCVE-2024-51551abb · aspect-ent-12_firmware +21 moreDefault CredentialsDefault Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.07.02;
NEXUS Series v3.07.02;
MATRIX Series v3.07.02EPSS0.45%CriticalCVE-2024-51549abb · aspect-ent-12_firmware +21 moreAbsolute Path TraversalAbsolute File Traversal vulnerabilities allows access and modification of un-intended resources.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.54%CriticalCVE-2024-51554abb · aspect-ent-12_firmware +21 moreoff-by-one-errorDefault Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.39%HighCVE-2024-51541abb · aspect-ent-12_firmware +21 moreLocal File InclusionAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.32%HighCVE-2024-51542abb · aspect-ent-12_firmware +21 moreConfiguration DownloadAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.33%CriticalCVE-2024-51545abb · aspect-ent-12_firmware +21 moreUsername EnumerationAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.43%HighCVE-2024-51544abb · aspect-ent-12_firmware +21 moreService ControlAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS13.24%CriticalCVE-2024-51547abb · aspect-ent-12_firmware +21 moreCredentials Disclosure - keysUse of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.EPSS0.62%HighCVE-2024-51546abb · aspect-ent-12_firmware +21 moreCredentails DisclosureCredentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS1.47%CriticalCVE-2024-51548abb · aspect-ent-12_firmware +21 moreDangerous File UploadAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.59%CriticalCVE-2024-51550abb · aspect-ent-12_firmware +21 moreData Validation / SanitizationData Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS1.81%HighCVE-2024-11316abb · aspect-ent-12_firmware +21 moreFilesize CheckFileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.62%CriticalCVE-2024-11317abb · aspect-ent-12_firmware +21 morePHP Session FixationSession Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.43%HighCVE-2024-48844abb · aspect-ent-12_firmware +21 moreDenial of Service, DoSDenial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.87%CriticalCVE-2024-48845abb · aspect-ent-12_firmware +21 moreWeak Password Rules/StrengthWeak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.
Affected products:
ABB ASPECT - Enterprise v3.07.02;
NEXUS Series v3.07.02;
MATRIX Series v3.07.02EPSS1.82%CriticalCVE-2024-48839abb · aspect-ent-12_firmware +21 moreRemote Code Execution, RCEImproper Input Validation vulnerability allows Remote Code Execution.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS2.83%HighCVE-2024-48846abb · aspect-ent-12_firmware +21 moreCross Side Request Forgery, CSRFCross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.64%HighCVE-2024-48843abb · aspect-ent-12_firmware +21 moreDenial of Service, DoSDenial of Service vulnerabilities where found providing a potiential for device service disruptions.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS0.28%CriticalCVE-2024-48840abb · aspect-ent-12_firmware +21 moreUnauthorized AccessAffected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02EPSS2.06%