Skip to content

Known vulnerabilities in ABB nexus_series

Is your version affected?

CVE Summary Score Published
CVE-2024-51551 Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default… 10.0 Critical Dec 5, 2024
CVE-2024-51550 Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected… 9.3 Critical Dec 5, 2024
CVE-2024-51549 Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products:… 10.0 Critical Dec 5, 2024
CVE-2024-51545 Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. … 9.3 Critical Dec 5, 2024
CVE-2024-48845 Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that… 9.3 Critical Dec 5, 2024
CVE-2024-48840 Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise… 9.3 Critical Dec 5, 2024
CVE-2024-48839 Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise… 10.0 Critical Dec 5, 2024
CVE-2024-11317 Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an… 10.0 Critical Dec 5, 2024
CVE-2024-6516 Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a… 9.3 Critical Dec 5, 2024

Other ABB products