CVE-2024-6515: Abb Aspect-Ent-12 Firmware

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

• Abb Aspect-Ent-12 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-256 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-2 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Aspect-Ent-96 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-11 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-216 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-232 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Matrix-296 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-A Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-F Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264-G Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-264 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-2128 Firmware: before 3.08.03 (fixed in 3.08.03)
• Abb Nexus-3-264 Firmware: before 3.08.03 (fixed in 3.08.03)

Published 2024-12-05. Last modified 2026-06-17.