PT-2024-9186 · Abb · Matrix Series+2

Published 2024-12-05 · Updated 2024-12-05 · CVE-2024-48843

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02

Description: The issue is related to Denial of Service vulnerabilities, which could potentially cause device service disruptions. It is associated with unlimited resource distribution in the software of embedded network controllers for building management. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service.

Recommendations: For ABB ASPECT - Enterprise version 3.08.02, update to a version that addresses the Denial of Service vulnerability. For NEXUS Series version 3.08.02, update to a version that addresses the Denial of Service vulnerability. For MATRIX Series version 3.08.02, update to a version that addresses the Denial of Service vulnerability. As a temporary workaround, consider restricting access to the affected devices to minimize the risk of exploitation.

Fix

SQL injection

Allocation of Resources Without Limits

Weakness Enumeration

CWE-89

CWE-770

Related Identifiers

BDU:2024-10873

CVE-2024-48843

Affected Products

Abb Aspect

Matrix Series

Nexus Series

References · 8

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10873 · Security Note
• https://osv.dev/vulnerability/CVE-2024-48843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48843 · Security Note
• https://t.me/cvenotify/103101 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/latest_high_impact_cve/1610 · Telegram Post
• https://twitter.com/CVEnew/status/1864657052926108065 · Twitter Post