9.3
Critical
CVE-2024-51555 Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials…
Description
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASPECT-Enterprise 3.07 | earliest → 3.07.02 | No fix stated |
| NEXUS Series 3.07 | earliest → 3.07.02 | No fix stated |
| MATRIX Series 3.07 | earliest → 3.07.02 | No fix stated |
Other CVEs of ASPECT-Enterprise
The 58 CVEs of ASPECT-Enterprise →
CVE-2024-13945
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials…
8.4
High
CVE-2024-51552
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue…
7.1
High
CVE-2024-13958
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue…
4.6
Medium
CVE-2024-13957
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis…
7.0
High