Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-13954 EUVD-2024-54589GHSA-7r8r-45g3-pmf8

Serialization / Deserialization of configuration data

Published May 22, 2025 · Updated May 22, 2025 · Assigned by ABB

Description

Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected products

VendorProductAffectedFixed
ABB ASPECT-Enterprise ≤ 3.* —
ABB NEXUS Series ≤ 3.* —
ABB MATRIX Series ≤ 3.* —

Advisories 1

References