PT-2024-6673 · Abb · Matrix Series+2

Published 2024-06-26 · Updated 2024-07-04 · CVE-2024-4007

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ABB ASPECT; NEXUS Series; MATRIX Series version 3.07

Description: The issue is related to the use of default credentials in the installation package of the affected products, allowing an attacker to log in to wrongly configured product instances. This could enable a remote attacker to gain full control over the device.

Recommendations: For ABB ASPECT; NEXUS Series; MATRIX Series version 3.07, consider changing the default credentials to unique, strong passwords to prevent unauthorized access. As a temporary workaround, restrict access to the device until a patch or fix is available.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2024-07879

CVE-2024-4007

Affected Products

Abb Aspect

Matrix Series

Nexus Series

References · 7

• 🔥 https://exploit-db.com/exploits/52112 · Exploit
• https://bdu.fstec.ru/vul/2024-07879 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4007 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4007 · Vendor Advisory
• https://twitter.com/cracbot/status/1809105043720917205 · Twitter Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch · Note