Abb Nexus-2128-F Firmware vulnerabilities

28 CVEs affecting Abb Nexus-2128-F Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51547, published 2025-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6298, published 2024-07-05. Critical severity, CVSS 9.8. EPSS: 19% chance of exploitation in the next 30 days. Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely
CVE-2024-6209, published 2024-07-05. High severity, CVSS 7.5. EPSS: 17.2% chance of exploitation in the next 30 days. Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized
CVE-2024-51544, published 2024-12-05. High severity, CVSS 8.2. EPSS: 13.2% chance of exploitation in the next 30 days. Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series…
CVE-2024-48839, published 2024-12-05. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVE-2024-48840, published 2024-12-05. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVE-2024-48845, published 2024-12-05. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB…
CVE-2024-51550, published 2024-12-05. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02;…
CVE-2024-51546, published 2024-12-05. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVE-2023-0636, published 2023-06-05. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series…
CVE-2024-6516, published 2024-12-05. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS…

Latest

CVE-2024-51547, published 2025-02-06. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series:…
CVE-2024-6784, published 2024-12-05. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB ASPECT - Enterprise…
CVE-2024-6515, published 2024-12-05. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB…
CVE-2024-51554, published 2024-12-05. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series…
CVE-2024-51551, published 2024-12-05. Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days. Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series…
CVE-2024-51549, published 2024-12-05. Critical severity, CVSS 9.4. EPSS: 0.5% chance of exploitation in the next 30 days. Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series…
CVE-2024-51548, published 2024-12-05. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02