Skip to content
OpenAdvisories
Critical ICSA-25-051-01 1 CVE

ABB ASPECT-Enterprise NEXUS and MATRIX Series

Published Feb 5, 2025 · Updated Feb 5, 2025

Vendor: ABB Product: ASP-ENT-x Product: MAT-x Product: NEX-2x

Summary

ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers of this already.
An attacker who successfully exploits these vulnerabilities could gain unauthorized access and potentially compromise the system's - and log-file - confidentiality, integrity and availability.
ABB requires, as noted in previous security advisories and user documentation, that ASPECT should not be exposed to the internet or any other insecure network.
Note: In order to exploit an ASPECT, an attacker would need a misconfigured system.
ABB strongly advises customers and system integrators to follow the instructions documented in: FBXi, CBXi and ASPECT® SOLUTIONS, which can be downloaded from the ABB library.

Vulnerabilities 1

  • Critical 9.8
    CVE-2024-51547

    Credentials Disclosure - keys

    Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT

Revision history

  1. #1.0.0

    Initial version.

References