CVE-2024-48846: Abb Aspect-Ent-12 Firmware

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

• Abb Aspect-Ent-12 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-256 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-2 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-96 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-11 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-216 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-232 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-296 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-264 Firmware: before 3.08.03 (fixed in 3.08.03)

Published 2024-12-05. Last modified 2026-06-17.