Skip to content
OpenAdvisories
Critical ICSA-25-007-01 26 CVEs

ABB ASPECT System

Published Jul 3, 2024 · Updated Dec 5, 2024 · Revision 4

Vendor: ABB Product: ASP-ENT-x Product: MAT-x Product: NEX-2x Product: NEXUS-3-x

Summary

ABB became aware of vulnerabilities in the product versions listed as affected in the advisory.
ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed cus-tomers of this parameter.
An attacker can successfully exploit these vulnerabilities and could take remote control of the product and po-tentially insert and run arbitrary code.
ABB requires, as noted in previous security advisories and user documentation, that ASPECT should not be exposed to the internet or any other insecure network.

Note: In order to exploit an ASPECT, an attacker would need a misconfigured system.

Vulnerabilities 26

  • Critical 10.0
    CVE-2024-11317

    PHP Session Fixation

    Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 10.0
    CVE-2024-48839 Public exploit

    Remote Code Execution, RCE

    Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 10.0
    CVE-2024-48840 Public exploit

    Unauthorized Access

    Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • Critical 10.0
    CVE-2024-51545

    Username Enumeration

    Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-51549

    Absolute Path Traversal

    Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 10.0
    CVE-2024-51550 Public exploit

    Data Validation / Sanitization

    Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-51551

    Default Credentials

    Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-51555

    Force Change of Default Credentials

    Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series…

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • Critical 10.0
    CVE-2024-6209 Public exploit EPSS 17%

    unauthorized file access

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 10.0
    CVE-2024-6298 Public exploit EPSS 19%

    remote code execution

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 9.9
    CVE-2024-51548

    Dangerous File Upload

    Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • Critical 9.9
    CVE-2024-6784

    SSRF Server Side Request Forgery

    Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 9.6
    CVE-2024-6515

    unauthorized file access

    Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v…

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • Critical 9.4
    CVE-2024-48845 Public exploit

    Weak Password Rules/Strength

    Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Ser…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 9.1
    CVE-2024-51554

    off-by-one-error

    Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Critical 9.0
    CVE-2024-6516 Public exploit

    Cross Site Scripting XSS

    Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.2
    CVE-2024-48847

    MD5 bypass operation

    MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.2
    CVE-2024-51541

    Local File Inclusion

    Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 8.2
    CVE-2024-51542

    Configuration Download

    Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 8.2
    CVE-2024-51543

    Information Disclosure

    Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.2
    CVE-2024-51544 EPSS 13%

    Service Control

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.7
    CVE-2024-48843

    Denial of Service, DoS

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • High 7.7
    CVE-2024-48844 Public exploit

    Denial of Service, DoS

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.5
    CVE-2024-11316

    Filesize Check

    Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.5
    CVE-2024-51546 Public exploit

    Credentails Disclosure

    Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.1
    CVE-2024-48846 Public exploit

    Cross Side Request Forgery, CSRF

    Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT

Revision history

  1. #4.0.0

    Acknowledgment name correction

  2. #3.0.0

    Update of advisory due to availability of ASPECT version 3.08.03

  3. #2.0.0

    Update of advisory due to availability of ASPECT version 3.08.02

  4. #1.0.0

    Initial version.

References