PT-2024-9341 · Abb · Matrix Series+2

Published 2024-12-05 · Updated 2024-12-05 · CVE-2024-6515

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02

Description: The issue is related to the web browser interface, which may manipulate application username and password in clear text or Base64 encoding, increasing the probability of unintended credentials exposure. This could allow a remote attacker to disclose protected information.

Recommendations: For ABB ASPECT - Enterprise version 3.08.02, update to version 3.08.03 to protect against the issue. For NEXUS Series version 3.08.02, update to version 3.08.03 to protect against the issue. For MATRIX Series version 3.08.02, update to version 3.08.03 to protect against the issue.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2024-11031

CVE-2024-6515

Affected Products

Abb Aspect

Matrix Series

Nexus Series

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-6515 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6515 · Vendor Advisory
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11031 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/CVEnew/status/1864657063588123080 · Twitter Post
• https://twitter.com/CveFindCom/status/1864649788727136536 · Twitter Post
• https://t.me/cvedetector/12078 · Telegram Post