CVE-2024-13945

CWE-363 documents3 sources
Severity
8.4HIGH
EPSS
0.5%
top 35.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ABB Aspect-enterpriseABB Matrix SeriesABB Nexus Series
Timeline
PublishedMay 23

Description

Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Affected Packages3 packages

▶CVEListV5abb/nexus_series3.*
▶CVEListV5abb/matrix_series3.*
▶CVEListV5abb/aspect-enterprise3.*

🔴Vulnerability Details

2
CVEList
Stored Absolute Path Traversal↗2025-05-23
▶
GHSA
GHSA-v7rw-f6q6-rhwq: Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised↗2025-05-23
▶
CVE-2024-13945 (HIGH CVSS 8.4) | Stored Absolute Path Traversal vuln | cvebase.io