PT-2023-2999 · Unknown · Nexus Series+2

Published 2023-06-05 · Updated 2024-09-19 · CVE-2023-0635

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions 3.0;0 through 3.07.01 NEXUS Series versions 3.0;0 through 3.07.01 MATRIX Series versions 3.0;0 through 3.07.01

Description The issue is related to improper privilege management, which can allow an attacker to escalate their privileges to the level of root. This can be exploited to gain unauthorized access and control.

Recommendations For ASPECT-Enterprise versions 3.0;0 through 3.07.01, update to version 3.07.01 or later. For NEXUS Series versions 3.0;0 through 3.07.01, update to version 3.07.01 or later. For MATRIX Series versions 3.0;0 through 3.07.01, update to version 3.07.01 or later. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-1391

CWE-269

Related Identifiers

BDU:2023-03029

CVE-2023-0635

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 7

• https://bdu.fstec.ru/vul/2023-03029 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0635 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0635 · Security Note
• https://t.me/cibsecurity/64970 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/cvenotify/95263 · Telegram Post