8.7
High
CVE-2024-4007 Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login…
Description
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASPECT Enterprise (ASP-ENT-x) | 3.07 | No fix stated |
| NEXUS Series (NEX-2x, NEXUS-3-x) | 3.07 | No fix stated |
| MATRIX Series(MAT-x) | 3.07 | No fix stated |
| aspect-ent-2_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| aspect-ent-96_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-2128-a_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-2128-f_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-2128_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-2128-g_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| nexus-264-a_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-264-f_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-264_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-264-g_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-3-2128_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| nexus-3-264_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| matrix-11_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| matrix-216_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| matrix-232_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| matrix-264_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| aspect-ent-12_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| aspect-ent-256_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |
| matrix-296_firmware 3.0 | 3.0.0 → < 3.07.02 | 3.07.02 |