PT-2025-22504 · Unknown · Matrix Series+2

Published 2025-05-22 · Updated 2025-05-22 · CVE-2024-48850

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description The issue allows access and modification of unintended resources due to Absolute File Traversal vulnerabilities in ASPECT.

Recommendations For ASPECT-Enterprise versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For NEXUS Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For MATRIX Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue.

Fix

Weakness Enumeration

CWE-36

Related Identifiers

CVE-2024-48850

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-48850 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/CVEnew/status/1925601156744491156 · Twitter Post