NF
Product
Nexus-2128-a Firmware
28
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 2Low 0
Watch
Add Nexus-2128-a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-51551 | 10.0 | Dec 5 | Default Credentials Affected: through 3.07.02 |
| CVE-2024-11317 | 10.0 | Dec 5 | PHP Session Fixation Affected: before 3.08.03 |
| CVE-2024-6784 | 9.9 | Dec 5 | SSRF Server Side Request Forgery Affected: before 3.08.03 |
| CVE-2024-51547 | 9.8 | Feb 6 | Credentials Disclosure - keys Affected: through 3.08.03 |
| CVE-2024-51554 | 9.8 | Dec 5 | off-by-one-error Affected: before 3.08.03 |
| CVE-2024-51550 | 9.8 | Dec 5 | Data Validation / Sanitization Affected: before 3.08.03 |
| CVE-2024-51545 | 9.8 | Dec 5 | Username Enumeration Affected: before 3.08.03 |
| CVE-2024-48845 | 9.8 | Dec 5 | Weak Password Rules/Strength Affected: before 3.08.03 |
| CVE-2024-48840 | 9.8 | Dec 5 | Unauthorized Access Affected: before 3.08.03 |
| CVE-2024-48839 | 9.8 | Dec 5 | Remote Code Execution, RCE Affected: before 3.08.03 |
| CVE-2024-6298 | 9.8 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely Affected: through 3.08.01 |
| CVE-2023-0636 | 9.8 | Jun 5 | Improper Input Validation vulnerability in ABB Ltd Affected: 3.0.0 before 3.07.01 |
| CVE-2023-0635 | 9.8 | Jun 5 | Improper Privilege Management vulnerability in ABB Ltd Affected: 3.0.0 before 3.07.01 |
| CVE-2024-51549 | 9.4 | Dec 5 | Absolute Path Traversal Affected: before 3.08.03 |
| CVE-2024-48847 | 9.1 | Dec 5 | MD5 bypass operation Affected: before 3.08.03 |
| CVE-2024-51548 | 8.8 | Dec 5 | Dangerous File Upload Affected: before 3.08.03 |
| CVE-2024-51544 | 8.2 | Dec 5 | Service Control Affected: before 3.08.03 |
| CVE-2024-51542 | 8.2 | Dec 5 | Configuration Download Affected: before 3.08.03 |
| CVE-2024-6515 | 8.1 | Dec 5 | unauthorized file access Affected: before 3.08.03 |
| CVE-2024-51546 | 7.5 | Dec 5 | Credentails Disclosure Affected: before 3.08.03 |
| CVE-2024-51543 | 7.5 | Dec 5 | Information Disclosure Affected: before 3.08.03 |
| CVE-2024-51541 | 7.5 | Dec 5 | Local File Inclusion Affected: before 3.08.03 |
| CVE-2024-48843 | 7.5 | Dec 5 | Denial of Service, DoS Affected: before 3.08.03 |
| CVE-2024-11316 | 7.5 | Dec 5 | Filesize Check Affected: before 3.08.03 |
| CVE-2024-6209 | 7.5 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized Affected: through 3.08.01 |
| CVE-2024-48846 | 7.3 | Dec 5 | Cross Side Request Forgery, CSRF Affected: before 3.08.03 |
| CVE-2024-48844 | 6.5 | Dec 5 | Denial of Service, DoS Affected: before 3.08.03 |
| CVE-2024-6516 | 6.1 | Dec 5 | Cross Site Scripting XSS Affected: before 3.08.03 |
Showing 28