PT-2024-9239 · Abb · Abb Aspect Nexus Series+2

Published 2024-12-05 · Updated 2024-12-05 · CVE-2024-51554

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ABB ASPECT Enterprise version 3.08.02 ABB ASPECT NEXUS Series version 3.08.02 ABB ASPECT MATRIX Series version 3.08.02

Description: The issue is related to a default credential vulnerability, which can be exploited by an attacker to gain unauthorized access to the device using publicly available default credentials. This is due to an error that allows access to the product.

Recommendations: For ABB ASPECT Enterprise version 3.08.02, change the default credentials to secure ones as soon as possible. For ABB ASPECT NEXUS Series version 3.08.02, update the default credentials with strong, unique ones. For ABB ASPECT MATRIX Series version 3.08.02, replace the default credentials with secure, non-default ones to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-193

Related Identifiers

BDU:2024-10927

CVE-2024-51554

Affected Products

Abb Aspect Enterprise

Abb Aspect Matrix Series

Abb Aspect Nexus Series

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-51554 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-51554 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10927 · Security Note
• https://twitter.com/CVEnew/status/1864657033640763525 · Twitter Post
• https://t.me/cvedetector/12086 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://t.me/latest_high_impact_cve/1611 · Telegram Post