PT-2025-22531 · Unknown · Matrix Series+2

Published 2025-05-22 · Updated 2025-05-22 · CVE-2024-13930

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03

Description An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised.

Recommendations For ASPECT-Enterprise versions through 3.08.03, consider restricting access to administrator credentials to minimize the risk of exploitation. For NEXUS Series versions through 3.08.03, restrict access to system resources to prevent malicious consumption. For MATRIX Series versions through 3.08.03, limit the ability of attackers to compromise session administrator credentials. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-606

Related Identifiers

CVE-2024-13930

Affected Products

Aspect-Enterprise

Matrix Series

Nexus Series

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-13930 · Security Note
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch · Note
• https://twitter.com/CVEnew/status/1925617962095935857 · Twitter Post