PT-2025-22518 · Unknown · Matrix Series+2

CVE-2025-2409 · Publicado 2025-05-22 · Atualizado 2025-05-22

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description The issue allows attackers to overwrite system files if session administrator credentials become compromised, providing access to file corruption vulnerabilities in ASPECT.

Recommendations For ASPECT-Enterprise versions through 3.08.03, update to a version that addresses the file corruption vulnerability. For NEXUS Series versions through 3.08.03, update to a version that addresses the file corruption vulnerability. For MATRIX Series versions through 3.08.03, update to a version that addresses the file corruption vulnerability.

Correção

Enumeração de Fraquezas

CWE-73

Identificadores relacionados

CVE-2025-2409

Produtos afetados

Aspect-Enterprise

Matrix Series

Nexus Series

Referências · 4

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Nota
• https://twitter.com/CveFindCom/status/1925615195142971865 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-2409 · Nota de Segurança
• https://twitter.com/CVEnew/status/1925610242504581189 · Publicação no Twitter