CVE-2024-51541

published 2024-12-05

CVE-2024-51541: Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02…

high 8.8 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI L VA N SC L SI L SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Local File Inclusion vulnerabilities allow access to sensitive system information.
Affected products:

ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02

Affected

22 ranges

Vendor	Product	Version range	Fixed in
abb	aspect-ent-12_firmware	< 3.08.03	3.08.03
abb	aspect-ent-256_firmware	< 3.08.03	3.08.03
abb	aspect-ent-2_firmware	< 3.08.03	3.08.03
abb	aspect-ent-96_firmware	< 3.08.03	3.08.03
abb	aspect-enterprise	<= 3.08.02	—
abb	matrix-11_firmware	< 3.08.03	3.08.03
abb	matrix-216_firmware	< 3.08.03	3.08.03
abb	matrix-232_firmware	< 3.08.03	3.08.03
abb	matrix-264_firmware	< 3.08.03	3.08.03
abb	matrix-296_firmware	< 3.08.03	3.08.03
abb	matrix_series	<= 3.08.02	—
abb	nexus-2128-a_firmware	< 3.08.03	3.08.03
abb	nexus-2128-f_firmware	< 3.08.03	3.08.03
abb	nexus-2128-g_firmware	< 3.08.03	3.08.03
abb	nexus-2128_firmware	< 3.08.03	3.08.03
abb	nexus-264-a_firmware	< 3.08.03	3.08.03
abb	nexus-264-f_firmware	< 3.08.03	3.08.03
abb	nexus-264-g_firmware	< 3.08.03	3.08.03
abb	nexus-264_firmware	< 3.08.03	3.08.03
abb	nexus-3-2128_firmware	< 3.08.03	3.08.03
abb	nexus-3-264_firmware	< 3.08.03	3.08.03
abb	nexus_series	<= 3.08.02	—

CWE-98