CVE-2024-4007: Abb Aspect-Ent-12 Firmware

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

Affected products

• Abb Aspect-Ent-12 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Aspect-Ent-256 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Aspect-Ent-2 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Aspect-Ent-96 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Matrix-11 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Matrix-216 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Matrix-232 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Matrix-264 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Matrix-296 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Nexus-2128 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Nexus-264 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Nexus-3-2128 Firmware: before 3.07.02 (fixed in 3.07.02)
• Abb Nexus-3-264 Firmware: before 3.07.02 (fixed in 3.07.02)

Published 2024-07-01. Last modified 2026-06-17.