9.4
Critical
CVE-2024-6298 Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series …
Description
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASPECT-Enterprise 3.08 | earliest → 3.08.01 | No fix stated |
| NEXUS Series 3.08 | earliest → 3.08.01 | No fix stated |
| MATRIX Series 3.08 | earliest → 3.08.01 | No fix stated |
| aspect-ent-2_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| aspect-ent-96_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-2128-a_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-2128-f_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-2128_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-2128-g_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| nexus-264-a_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-264-f_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-264_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-264-g_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-3-2128_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| nexus-3-264_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| matrix-11_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| matrix-216_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| matrix-232_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| matrix-264_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| aspect-ent-12_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| aspect-ent-256_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
| matrix-296_firmware 3.08 | earliest → < 3.08.01 | 3.08.01 |
Other CVEs of ASPECT-Enterprise
The 58 CVEs of ASPECT-Enterprise →
CVE-2024-13945
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials…
8.4
High
CVE-2024-51552
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue…
7.1
High
CVE-2024-13958
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue…
4.6
Medium
CVE-2024-13957
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis…
7.0
High