Description
File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | ASPECT-Enterprise | ≤ 3.08.03 | — |
| ABB | NEXUS Series | ≤ 3.08.03 | — |
| ABB | MATRIX Series | ≤ 3.08.03 | — |
Advisories 2
- 9AKK108471A0021 ELSB/BLBA ASPECT advisory several CVEs ABB PSIRT · May 23, 2025
- NCSC-2025-0177 Kwetsbaarheden verholpen in ABB ASPECT-productlijn NCSC-NL (Netherlands) · May 23, 2025