CVE-2024-48840

published 2024-12-05

CVE-2024-48840: Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series…

critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA L SC L SI L SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

Unauthorized Access vulnerabilities allow Remote Code Execution.
Affected products:

ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02

Affected

22 ranges

Vendor	Product	Version range	Fixed in
abb	aspect-ent-12_firmware	< 3.08.03	3.08.03
abb	aspect-ent-256_firmware	< 3.08.03	3.08.03
abb	aspect-ent-2_firmware	< 3.08.03	3.08.03
abb	aspect-ent-96_firmware	< 3.08.03	3.08.03
abb	aspect-enterprise	<= 3.08.02	—
abb	matrix-11_firmware	< 3.08.03	3.08.03
abb	matrix-216_firmware	< 3.08.03	3.08.03
abb	matrix-232_firmware	< 3.08.03	3.08.03
abb	matrix-264_firmware	< 3.08.03	3.08.03
abb	matrix-296_firmware	< 3.08.03	3.08.03
abb	matrix_series	<= 3.08.02	—
abb	nexus-2128-a_firmware	< 3.08.03	3.08.03
abb	nexus-2128-f_firmware	< 3.08.03	3.08.03
abb	nexus-2128-g_firmware	< 3.08.03	3.08.03
abb	nexus-2128_firmware	< 3.08.03	3.08.03
abb	nexus-264-a_firmware	< 3.08.03	3.08.03
abb	nexus-264-f_firmware	< 3.08.03	3.08.03
abb	nexus-264-g_firmware	< 3.08.03	3.08.03
abb	nexus-264_firmware	< 3.08.03	3.08.03
abb	nexus-3-2128_firmware	< 3.08.03	3.08.03
abb	nexus-3-264_firmware	< 3.08.03	3.08.03
abb	nexus_series	<= 3.08.02	—

CWE-94