PT-2024-9240 · Abb · Abb Aspect Enterprise

Published 2024-12-05 · Updated 2024-12-05 · CVE-2024-51544

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions: ABB ASPECT Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02

Description: The issue is related to errors in system settings or configuration, allowing a remote attacker to gain unauthorized access to protected information. It affects the Service Control component, enabling access to service restart requests and virtual machine configuration settings.

Recommendations: For ABB ASPECT Enterprise version 3.08.02, consider disabling the Service Control feature until a patch is available. For NEXUS Series version 3.08.02, restrict access to the service restart requests and virtual machine configuration settings to minimize the risk of exploitation. For MATRIX Series version 3.08.02, avoid using the vulnerable Service Control component until the issue is resolved.

Fix

Weakness Enumeration

CWE-15

Related Identifiers

BDU:2024-10928

CVE-2024-51544

Affected Products

Abb Aspect Enterprise

References · 9

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51544 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51544 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10928 · Security Note
• https://twitter.com/CveFindCom/status/1864657052494172509 · Twitter Post
• https://t.me/latest_high_impact_cve/1608 · Telegram Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/CVEnew/status/1864657042599788775 · Twitter Post
• https://t.me/cvedetector/12092 · Telegram Post