CVE-2024-4007

published 2024-07-01

CVE-2024-4007: Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

high 8.7 CVSS 4.0

AV A AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S N AU N R U V D RE L U Red

EXPLOIT

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
abb	aspect-ent-12_firmware	< 3.07.02	3.07.02
abb	aspect-ent-256_firmware	< 3.07.02	3.07.02
abb	aspect-ent-2_firmware	< 3.07.02	3.07.02
abb	aspect-ent-96_firmware	< 3.07.02	3.07.02
abb	aspect_enterprise	—	—
abb	matrix-11_firmware	< 3.07.02	3.07.02
abb	matrix-216_firmware	< 3.07.02	3.07.02
abb	matrix-232_firmware	< 3.07.02	3.07.02
abb	matrix-264_firmware	< 3.07.02	3.07.02
abb	matrix-296_firmware	< 3.07.02	3.07.02
abb	matrix_series	—	—
abb	nexus-2128_firmware	< 3.07.02	3.07.02
abb	nexus-264_firmware	< 3.07.02	3.07.02
abb	nexus-3-2128_firmware	< 3.07.02	3.07.02
abb	nexus-3-264_firmware	< 3.07.02	3.07.02

CWE-1392