Product
abb matrix 11 firmware
29 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-51547
CVE-2024-6784
CVE-2024-6516
CVE-2024-6515
CVE-2024-51554
CVE-2024-51551
CVE-2024-51550
CVE-2024-51549
CVE-2024-51548
CVE-2024-51546
CVE-2024-51545
CVE-2024-51544
CVE-2024-51543
CVE-2024-51542
CVE-2024-51541
CVE-2024-48847
CVE-2024-48846
CVE-2024-48845
CVE-2024-48844
CVE-2024-48843
CVE-2024-48840
CVE-2024-48839
CVE-2024-11317
CVE-2024-11316
CVE-2024-6298
CVE-2024-6209
CVE-2024-4007
CVE-2023-0636
CVE-2023-0635
<= 3.08.03
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPEC
< 3.08.03
Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended i
< 3.08.03
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.
< 3.08.03
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability
< 3.08.03
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
<= 3.07.02
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.
< 3.08.03
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect
< 3.08.03
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPEC
< 3.08.03
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02;
< 3.08.03
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enter
< 3.08.03
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected
< 3.08.03
Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB
< 3.08.03
Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT -
< 3.08.03
Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - E
< 3.08.03
Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise
<= 3.08.01
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates
< 3.08.03
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing syste
<= 3.07.02
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facili
< 3.08.03
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB AS
< 3.08.03
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB AS
< 3.08.03
Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS S
< 3.08.03
Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NE
< 3.08.03
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for ses
< 3.08.03
Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected products: ABB
<= 3.08.01
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 a
<= 3.08.01
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 a
< 3.07.02
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product
>= 3.0.0 and < 3.07.01
Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202
>= 3.0.0 and < 3.07.01
Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG10