CVE-2024-48847: Abb Aspect-Ent-12 Firmware

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

Affected products

• Abb Aspect-Ent-12 Firmware: up to and including 3.08.01
• Abb Aspect-Ent-256 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-2 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-96 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-11 Firmware: up to and including 3.08.01
• Abb Matrix-216 Firmware: up to and including 3.08.01
• Abb Matrix-232 Firmware: up to and including 3.08.01
• Abb Matrix-264 Firmware: up to and including 3.08.01
• Abb Matrix-296 Firmware: up to and including 3.08.01
• Abb Nexus-2128-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-264 Firmware: up to and including 3.08.01

Published 2024-12-05. Last modified 2026-06-17.