PT-2024-9238 · Abb · Matrix Series+2

Published 2024-12-05 · Updated 2024-12-09 · CVE-2024-51551

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.07.02 NEXUS Series version 3.07.02 MATRIX Series version 3.07.02

Description: The issue is related to default credential vulnerabilities in ASPECT on Linux, allowing access to the product using publicly available default credentials. It is also associated with incorrect input validation, which can be exploited by a remote attacker to gain unauthorized access to the device.

Recommendations: For ABB ASPECT - Enterprise version 3.07.02, update the default credentials to secure ones. For NEXUS Series version 3.07.02, change the default credentials to unique and secure ones. For MATRIX Series version 3.07.02, replace the default credentials with strong and unique ones.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-1287

CWE-798

Related Identifiers

BDU:2024-10926

CVE-2024-51551

Affected Products

Abb Aspect

Matrix Series

Nexus Series

References · 9

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51551 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51551 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10926 · Security Note
• https://twitter.com/CVEnew/status/1864657034928386368 · Twitter Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/the_yellow_fall/status/1865935434154647588 · Twitter Post
• https://t.me/latest_high_impact_cve/1611 · Telegram Post
• https://t.me/cvedetector/12085 · Telegram Post