Vulnerabilities > ABB

DATE CVE VULNERABILITY TITLE RISK
2024-12-05 CVE-2024-48847 Use of a Broken or Risky Cryptographic Algorithm vulnerability in ABB products
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01
network
low complexity
abb CWE-327
critical
9.1
2024-12-05 CVE-2024-51541 Unspecified vulnerability in ABB products
Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb
7.5
2024-12-05 CVE-2024-51542 Files or Directories Accessible to External Parties vulnerability in ABB products
Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb CWE-552
8.2
2024-12-05 CVE-2024-51543 Unspecified vulnerability in ABB products
Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb
7.5
2024-12-05 CVE-2024-51544 External Control of System or Configuration Setting vulnerability in ABB products
Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb CWE-15
8.2
2024-12-05 CVE-2024-51545 Unspecified vulnerability in ABB products
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb
critical
9.8
2024-12-05 CVE-2024-51546 Improper Validation of Specified Type of Input vulnerability in ABB products
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb CWE-1287
7.5
2024-12-05 CVE-2024-51548 Unspecified vulnerability in ABB products
Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb
8.8
2024-12-05 CVE-2024-51549 Path Traversal vulnerability in ABB products
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb CWE-22
critical
9.4
2024-12-05 CVE-2024-51550 Unspecified vulnerability in ABB products
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
network
low complexity
abb
critical
9.8