| CVE-2025-30170 |
Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system…
|
5.9
Moyenne
|
22 mai 2025 |
| CVE-2025-2409 |
File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator…
|
8.9
Élevée
|
22 mai 2025 |
| CVE-2025-2410 |
Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session…
|
8.9
Élevée
|
22 mai 2025 |
| CVE-2024-9639 |
Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised
|
7.5
Élevée
|
22 mai 2025 |
| CVE-2024-48850 |
Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources
|
7.5
Élevée
|
22 mai 2025 |
| CVE-2024-48853 |
An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a…
|
9.5
Critique
|
22 mai 2025 |
| CVE-2024-51547 |
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue…
|
9.3
Critique
|
6 févr. 2025 |
| CVE-2024-51555 |
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials…
|
9.3
Critique
|
5 déc. 2024 |
| CVE-2024-51554 |
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default…
|
8.8
Élevée
|
5 déc. 2024 |
| CVE-2024-51551 |
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default…
|
10.0
Critique
|
5 déc. 2024 |
| CVE-2024-51550 |
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected…
|
9.3
Critique
|
5 déc. 2024 |
| CVE-2024-51549 |
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products:…
|
10.0
Critique
|
5 déc. 2024 |
| CVE-2024-51548 |
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise…
|
8.7
Élevée
|
5 déc. 2024 |
| CVE-2024-51546 |
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB…
|
8.7
Élevée
|
5 déc. 2024 |
| CVE-2024-51545 |
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. …
|
9.3
Critique
|
5 déc. 2024 |
| CVE-2024-51544 |
Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected…
|
8.2
Élevée
|
5 déc. 2024 |
| CVE-2024-51543 |
Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB…
|
8.8
Élevée
|
5 déc. 2024 |
| CVE-2024-51542 |
Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB…
|
8.2
Élevée
|
5 déc. 2024 |
| CVE-2024-51541 |
Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT -…
|
8.8
Élevée
|
5 déc. 2024 |
| CVE-2024-48847 |
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or…
|
8.8
Élevée
|
5 déc. 2024 |
| CVE-2024-48846 |
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or…
|
7.1
Élevée
|
5 déc. 2024 |
| CVE-2024-48845 |
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that…
|
9.3
Critique
|
5 déc. 2024 |
| CVE-2024-48844 |
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products:…
|
7.7
Élevée
|
5 déc. 2024 |
| CVE-2024-48843 |
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products:…
|
7.7
Élevée
|
5 déc. 2024 |
| CVE-2024-48840 |
Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise…
|
9.3
Critique
|
5 déc. 2024 |