Skip to content

Known vulnerabilities in ABB ASPECT-Enterprise

Is your version affected?

CVE Summary Score Published
CVE-2024-13945 Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials… 8.4 High May 23, 2025
CVE-2024-51552 Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue… 7.1 High May 22, 2025
CVE-2024-13958 Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue… 4.6 Medium May 22, 2025
CVE-2024-13957 SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis… 7.0 High May 22, 2025
CVE-2024-13956 SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue… 8.8 High May 22, 2025
CVE-2024-13955 2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if… 9.4 Critical May 22, 2025
CVE-2024-13954 Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration… 5.1 Medium May 22, 2025
CVE-2024-13953 Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue… 6.9 Medium May 22, 2025
CVE-2024-13952 Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator… 8.7 High May 22, 2025
CVE-2024-51553 Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator… 7.0 High May 22, 2025
CVE-2024-13951 One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential… 6.1 Medium May 22, 2025
CVE-2024-13950 Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator… 6.9 Medium May 22, 2025
CVE-2024-13949 Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if… 6.9 Medium May 22, 2025
CVE-2024-48848 Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if… 7.0 High May 22, 2025
CVE-2024-13948 Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration… 6.9 Medium May 22, 2025
CVE-2024-13947 Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become… 7.1 High May 22, 2025
CVE-2024-13946 DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting… 7.1 High May 22, 2025
CVE-2024-13931 Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials… 7.5 High May 22, 2025
CVE-2024-13930 An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if… 5.9 Medium May 22, 2025
CVE-2024-13929 Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become… 7.5 High May 22, 2025
CVE-2024-13928 SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session… 7.5 High May 22, 2025
CVE-2025-30169 File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become… 6.0 Medium May 22, 2025
CVE-2025-30173 File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue… 6.0 Medium May 22, 2025
CVE-2025-30172 Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This… 8.9 High May 22, 2025
CVE-2025-30171 System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session… 7.3 High May 22, 2025

Other ABB products