PT-2024-9336 · Abb · Matrix Series+2

Published

2024-12-05

·

Updated

2024-12-05

·

CVE-2024-48839

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02
Description: The issue is related to improper input validation, which allows for remote code execution. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with incorrect code generation management in the software of embedded network controllers for building management.
Recommendations: For ABB ASPECT - Enterprise version 3.08.02, update to a version that fixes the improper input validation issue. For NEXUS Series version 3.08.02, update to a version that fixes the improper input validation issue. For MATRIX Series version 3.08.02, update to a version that fixes the improper input validation issue. As a temporary workaround, consider restricting access to the vulnerable software components until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-11026
CVE-2024-48839

Affected Products

Abb Aspect
Matrix Series
Nexus Series