PT-2025-22530 · Unknown · Matrix Series+2

Published 2025-05-22 · Updated 2025-05-22 · CVE-2024-13929

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised.

Recommendations For ASPECT-Enterprise versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For NEXUS Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. For MATRIX Series versions through 3.08.03, update to a version later than 3.08.03 to resolve the issue. As a temporary workaround, consider restricting access to administrator credentials to minimize the risk of exploitation.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-13929

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-13929 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/CVEnew/status/1925617963169640745 · Twitter Post