CVE-2024-48845: Abb Aspect-Ent-12 Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Affected products

• Abb Aspect-Ent-12 Firmware: up to and including 3.07.02
• Abb Aspect-Ent-256 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-2 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-96 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-11 Firmware: up to and including 3.07.02
• Abb Matrix-216 Firmware: up to and including 3.07.02
• Abb Matrix-232 Firmware: up to and including 3.07.02
• Abb Matrix-264 Firmware: up to and including 3.07.02
• Abb Matrix-296 Firmware: up to and including 3.07.02
• Abb Nexus-2128-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-264 Firmware: up to and including 3.07.02

Published 2024-12-05. Last modified 2026-06-17.