Skip to content
OpenAdvisories

Product · ABB

ASPECT-Enterprise

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

23 results · Clear filters · Feed

  • High 7.6
    CVE-2024-13957

    SSRF Server Side Request Forgery

    SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 8.8
    CVE-2024-13955

    SQL Injection 2nd Order

    2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: th…

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • High 8.4
    CVE-2024-13952

    Remote Code Execution

    Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.6
    CVE-2024-13951

    One way hash with predictable salt

    One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.3
    CVE-2024-13948

    Insecure Permissions

    Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.2
    CVE-2024-13931

    Authenticated Relative Path Traversal

    Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.2
    CVE-2024-13929

    Authenticated Servlet Command Injection

    Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.2
    CVE-2024-13928

    Authenticated SQL Injection

    SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Ser…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.0
    CVE-2025-30172

    Admin Authorized Remote Code Execution

    Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.0
    CVE-2024-9639

    Authenticated Remote Code Execution

    Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.2
    CVE-2024-48850

    Authenticated Absolute Path Traversal

    Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.5
    CVE-2024-51546 Public exploit

    Credentails Disclosure

    Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.2
    CVE-2024-51544 EPSS 13%

    Service Control

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 8.2
    CVE-2024-51543

    Information Disclosure

    Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 8.2
    CVE-2024-51542

    Configuration Download

    Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 8.2
    CVE-2024-51541

    Local File Inclusion

    Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • High 8.2
    CVE-2024-48847

    MD5 bypass operation

    MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.1
    CVE-2024-48846 Public exploit

    Cross Side Request Forgery, CSRF

    Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB MATRIX Series NEXUS Series ASPECT-Enterprise ICS / OT
  • High 7.7
    CVE-2024-48844 Public exploit

    Denial of Service, DoS

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.7
    CVE-2024-48843

    Denial of Service, DoS

    Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.5
    CVE-2024-11316

    Filesize Check

    Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    ABB NEXUS Series ASPECT-Enterprise MATRIX Series ICS / OT
  • High 7.2
    CVE-2023-0636

    Remote Code Execution via Command Injection

    Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • High 7.8
    CVE-2023-0635

    Privilege escalation to root

    Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R202…

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT