Skip to content
OpenAdvisories
Critical · 9.0 CVE-2024-48853 EUVD-2024-54567GHSA-c9x9-qgxx-cj62

Authenticated Escalation to guest to root

Published May 22, 2025 · Updated May 22, 2025 · Assigned by ABB

Description

An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected products

VendorProductAffectedFixed
ABB ASPECT-Enterprise ≤ 3.08.03 —
ABB NEXUS Series ≤ 3.08.03 —
ABB MATRIX Series ≤ 3.08.03 —

Advisories 2

References