CVE-2024-6209

published 2024-07-05

CVE-2024-6209: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files…

critical 9.4 CVSS 4.0

AV A AC L AT N PR N UI N VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R I V C RE H U Red

EXPLOIT

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series

v3.08.01

; MATRIX Series

v3.08.01 allows Attacker to access files unauthorized

Affected

22 ranges

Vendor	Product	Version range	Fixed in
abb	aspect-ent-12_firmware	<= 3.08.01	—
abb	aspect-ent-256_firmware	<= 3.08.01	—
abb	aspect-ent-2_firmware	<= 3.08.01	—
abb	aspect-ent-96_firmware	<= 3.08.01	—
abb	aspect-enterprise	<= 3.08.01	—
abb	matrix-11_firmware	<= 3.08.01	—
abb	matrix-216_firmware	<= 3.08.01	—
abb	matrix-232_firmware	<= 3.08.01	—
abb	matrix-264_firmware	<= 3.08.01	—
abb	matrix-296_firmware	<= 3.08.01	—
abb	matrix_series	<= 3.08.01	—
abb	nexus-2128-a_firmware	<= 3.08.01	—
abb	nexus-2128-f_firmware	<= 3.08.01	—
abb	nexus-2128-g_firmware	<= 3.08.01	—
abb	nexus-2128_firmware	<= 3.08.01	—
abb	nexus-264-a_firmware	<= 3.08.01	—
abb	nexus-264-f_firmware	<= 3.08.01	—
abb	nexus-264-g_firmware	<= 3.08.01	—
abb	nexus-264_firmware	<= 3.08.01	—
abb	nexus-3-2128_firmware	<= 3.08.01	—
abb	nexus-3-264_firmware	<= 3.08.01	—
abb	nexus_series	<= 3.08.01	—

CWE-552