PT-2025-22505 · Unknown · Matrix Series+2

Published 2025-05-22 · Updated 2025-05-22 · CVE-2024-48853

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description An escalation of privilege issue in ASPECT could allow an attacker to gain root access to a server when logged in as a non-root ASPECT user.

Recommendations For ASPECT-Enterprise versions through 3.08.03, update the software to a version later than 3.08.03. For NEXUS Series versions through 3.08.03, update the software to a version later than 3.08.03. For MATRIX Series versions through 3.08.03, update the software to a version later than 3.08.03.

Fix

Weakness Enumeration

CWE-286

Related Identifiers

CVE-2024-48853

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-48853 · Security Note
• https://twitter.com/CveFindCom/status/1925600068138095055 · Twitter Post
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/CVEnew/status/1925601157797290365 · Twitter Post