Description
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | ASPECT-Enterprise | ≤ 3.08.02 | — |
| ABB | NEXUS Series | ≤ 3.08.02 | — |
| ABB | MATRIX Series | initial – ≤ 3.08.02 | — |
Advisories 2
- NCSC-2024-0465 Kwetsbaarheden verholpen in ABB ASPECT, NEXUS Series en MATRIX Series NCSC-NL (Netherlands) · Dec 6, 2024
- ICSA-25-007-01 ABB ASPECT System CISA ICS & IT advisories · Dec 5, 2024