PT-2024-9196 · Abb · Matrix Series+2

Published 2024-12-05 · Updated 2024-12-05 · CVE-2024-51555

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.07.02 NEXUS Series version 3.07.02 MATRIX Series version 3.07.02

Description: The issue is related to the use of default passwords in the system, which does not require the installer to change them. This allows access to the device using publicly available default credentials. An attacker can exploit this to gain elevated privileges remotely.

Recommendations: For ABB ASPECT - Enterprise version 3.07.02, change the default credentials to secure ones as soon as possible. For NEXUS Series version 3.07.02, update the default passwords with unique and strong credentials. For MATRIX Series version 3.07.02, ensure that all default credentials are changed to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-1393

CWE-521

Related Identifiers

BDU:2024-10883

CVE-2024-51555

Affected Products

Abb Aspect

Matrix Series

Nexus Series

References · 7

• https://bdu.fstec.ru/vul/2024-10883 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-51555 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/latest_high_impact_cve/1611 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/CVEnew/status/1864665751036068293 · Twitter Post
• https://t.me/cvedetector/12087 · Telegram Post