Advisories · Technology

ABB ASPECT-Enterprise.

Every CVE that names ABB ASPECT-Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-13945 CVE record

CVSS 8.4 High

Stored Absolute Path Traversal
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Path traversal
Not analysed yet 23 May 2025
CVE-2024-51552 CVE record

CVSS 7.1 High

Weak Password Storage
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-257
Not analysed yet 22 May 2025
CVE-2024-13958 CVE record

CVSS 4.6 Medium

Stored Cross Site Scripting
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2025
CVE-2024-13957 CVE record

CVSS 7.0 High

SSRF Server Side Request Forgery
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Server-side request forgery (SSRF)
Not analysed yet 22 May 2025
CVE-2024-13956 CVE record

CVSS 8.8 High

SSL Verification Bypass
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Weak cryptography or TLS
Not analysed yet 22 May 2025
CVE-2024-13955 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

SQL Injection 2nd Order
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- SQL injection
Not analysed yet 22 May 2025
CVE-2024-13954 CVE record

CVSS 5.1 Medium

Serialization / Deserialization of configuration data
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Information disclosure
Not analysed yet 22 May 2025
CVE-2024-13953 CVE record

CVSS 6.9 Medium

Sensitive Information disclosed in log files
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Information disclosure
Not analysed yet 22 May 2025
CVE-2024-13952 CVE record

CVSS 8.7 High

Remote Code Execution
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 22 May 2025
CVE-2024-51553 CVE record

CVSS 7.0 High

Predictable Filename
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Path traversal
Not analysed yet 22 May 2025
CVE-2024-13951 CVE record

CVSS 6.1 Medium

One way hash with predictable salt
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-760
Not analysed yet 22 May 2025
CVE-2024-13950 CVE record

CVSS 6.9 Medium

Log Injection
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2025
CVE-2024-13949 CVE record

CVSS 6.9 Medium

Log Forging
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Other injection
Not analysed yet 22 May 2025
CVE-2024-48848 CVE record

CVSS 7.0 High

LARGECONTENT - device disk overutilization
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-774
Not analysed yet 22 May 2025
CVE-2024-13948 CVE record

CVSS 6.9 Medium

Insecure Permissions
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Broken access control
Not analysed yet 22 May 2025
CVE-2024-13947 CVE record

CVSS 7.1 High

External System or Configuration Control
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Broken access control
Not analysed yet 22 May 2025
CVE-2024-13946 CVE record

CVSS 7.1 High

Binary Planting / LoadLibrary DLL's not Signed
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-427
Not analysed yet 22 May 2025
CVE-2024-13931 CVE record

CVSS 7.5 High

Authenticated Relative Path Traversal
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-606
Not analysed yet 22 May 2025
CVE-2024-13930 CVE record

CVSS 5.9 Medium

Authenticated Unchecked Loop Condition
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-606
Not analysed yet 22 May 2025
CVE-2024-13929 CVE record

CVSS 7.5 High

Authenticated Servlet Command Injection
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 22 May 2025
CVE-2024-13928 CVE record

CVSS 7.5 High

Authenticated SQL Injection
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 22 May 2025
CVE-2025-30169 CVE record

CVSS 6.0 Medium

Admin Authorized File Upload and Execute PHP
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Unrestricted file upload
Not analysed yet 22 May 2025
CVE-2025-30173 CVE record

CVSS 6.0 Medium

Admin Authorized File Upload
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Unrestricted file upload
Not analysed yet 22 May 2025
CVE-2025-30172 CVE record

CVSS 8.9 High

Admin Authorized Remote Code Execution
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 22 May 2025
CVE-2025-30171 CVE record

CVSS 7.3 High

Admin Authorized System File Deletion
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Broken access control
Not analysed yet 22 May 2025
CVE-2025-30170 CVE record

CVSS 5.9 Medium

Admin Authorized Exposure of file path, file size or file existence
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Information disclosure
Not analysed yet 22 May 2025
CVE-2025-2409 CVE record

CVSS 8.9 High

Admin Authorized System File corruption
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Path traversal
Not analysed yet 22 May 2025
CVE-2025-2410 CVE record

CVSS 8.9 High

Admin Authorized Port (iptables) manipulation (open/close/disable ports)
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-99
Not analysed yet 22 May 2025
CVE-2024-9639 CVE record

CVSS 7.5 High

Authenticated Remote Code Execution
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 22 May 2025
CVE-2024-48850 CVE record

CVSS 7.5 High

Authenticated Absolute Path Traversal
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Path traversal
Not analysed yet 22 May 2025
CVE-2024-48853 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

Authenticated Escalation to guest to root
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-286
Not analysed yet 22 May 2025
CVE-2024-51547 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Credentials Disclosure - keys
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Hard-coded credentials
Not analysed yet 6 Feb 2025
CVE-2024-51555 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Force Change of Default Credentials
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-1393
Not analysed yet 5 Dec 2024
CVE-2024-51554 CVE record

CVSS 8.8 High

off-by-one-error
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-193
Not analysed yet 5 Dec 2024
CVE-2024-51551 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Default Credentials
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-1287
Not analysed yet 5 Dec 2024
CVE-2024-51550 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Data Validation / Sanitization
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-1287
Not analysed yet 5 Dec 2024
CVE-2024-51549 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Absolute Path Traversal
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Path traversal
Not analysed yet 5 Dec 2024
CVE-2024-51548 CVE record

CVSS 8.7 High

Dangerous File Upload
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Unrestricted file upload
Not analysed yet 5 Dec 2024
CVE-2024-51546 CVE record

CVSS 8.7 High

Credentails Disclosure
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-1287
Not analysed yet 5 Dec 2024
CVE-2024-51545 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Username Enumeration
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Hard-coded credentials
Not analysed yet 5 Dec 2024
CVE-2024-51544 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Service Control
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-15
Not analysed yet 5 Dec 2024
CVE-2024-51543 CVE record

CVSS 8.8 High

Information Disclosure
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-15
Not analysed yet 5 Dec 2024
CVE-2024-51542 CVE record

CVSS 8.8 High

Configuration Download
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Information disclosure
Not analysed yet 5 Dec 2024
CVE-2024-51541 CVE record

CVSS 8.8 High

Local File Inclusion
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- File inclusion
Not analysed yet 5 Dec 2024
CVE-2024-48847 CVE record

CVSS 8.8 High

MD5 bypass operation
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Weak cryptography or TLS
Not analysed yet 5 Dec 2024
CVE-2024-48846 CVE record

CVSS 7.1 High

Cross Side Request Forgery, CSRF
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Cross-site request forgery (CSRF)
Not analysed yet 5 Dec 2024
CVE-2024-48845 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Weak Password Rules/Strength
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Hard-coded credentials
Not analysed yet 5 Dec 2024
CVE-2024-48844 CVE record

CVSS 7.2 High

Denial of Service, DoS
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Denial of service
Not analysed yet 5 Dec 2024
CVE-2024-48843 CVE record

CVSS 7.6 High

Denial of Service, DoS
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Denial of service
Not analysed yet 5 Dec 2024
CVE-2024-48840 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unauthorized Access
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 5 Dec 2024
CVE-2024-48839 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Remote Code Execution, RCE
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Code injection
Not analysed yet 5 Dec 2024
CVE-2024-11317 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

PHP Session Fixation
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Authentication bypass
Not analysed yet 5 Dec 2024
CVE-2024-11316 CVE record

CVSS 8.7 High

Filesize Check
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Denial of service
Not analysed yet 5 Dec 2024
CVE-2024-6784 CVE record

CVSS 8.7 High

SSRF Server Side Request Forgery
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Server-side request forgery (SSRF)
Not analysed yet 5 Dec 2024
CVE-2024-6516 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross Site Scripting XSS
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Cross-site scripting (XSS)
Not analysed yet 5 Dec 2024
CVE-2024-6515 CVE record

CVSS 8.7 High

unauthorized file access
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Weak cryptography or TLS
Not analysed yet 5 Dec 2024
CVE-2024-6209 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

unauthorized file access
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- Information disclosure
Not analysed yet 5 Jul 2024
CVE-2024-6298 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

remote code execution
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-1287
Not analysed yet 5 Jul 2024