PT-2025-22522 · Unknown · Matrix Series+2

Published 2025-05-22 · Updated 2025-05-22 · CVE-2025-30171

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description The issue allows attackers to delete system files if session administrator credentials become compromised, providing them with unauthorized access.

Recommendations For ASPECT-Enterprise versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For NEXUS Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For MATRIX Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-30171

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-30171 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/CVEnew/status/1925610240667537506 · Twitter Post