9.3
Critical
CVE-2024-48845 Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that…
Description
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASPECT-Enterprise 3.07 | earliest → 3.07.02 | No fix stated |
| NEXUS Series 3.07 | earliest → 3.07.02 | No fix stated |
| MATRIX Series 3.07 | earliest → 3.07.02 | No fix stated |
| aspect_enterprise 3.08 | earliest → 3.08.01 | No fix stated |
| nexus_series 3.08 | earliest → 3.08.01 | No fix stated |
| matrix_series 3.08 | earliest → 3.08.01 | No fix stated |
Other CVEs of ASPECT-Enterprise
The 58 CVEs of ASPECT-Enterprise →
CVE-2024-13945
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials…
8.4
High
CVE-2024-51552
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue…
7.1
High
CVE-2024-13958
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue…
4.6
Medium
CVE-2024-13957
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis…
7.0
High