CVE-2024-48839: Abb Aspect-Ent-12 Firmware

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

• Abb Aspect-Ent-12 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-256 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-2 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-96 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-11 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-216 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-232 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-296 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-264 Firmware: before 3.08.03 (fixed in 3.08.03)

Published 2024-12-05. Last modified 2026-06-17.