NF
Product
Nexus-264-f Firmware
28
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 11Medium 2Low 0
Watch
Add Nexus-264-f Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-51551 | 10.0 | Dec 5 | Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise… Affected: through 3.07.02 |
| CVE-2024-11317 | 10.0 | Dec 5 | Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: … Affected: before 3.08.03 |
| CVE-2024-6784 | 9.9 | Dec 5 | Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB… Affected: before 3.08.03 |
| CVE-2024-51547 | 9.8 | Feb 6 | Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through… Affected: through 3.08.03 |
| CVE-2024-51554 | 9.8 | Dec 5 | Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise… Affected: before 3.08.03 |
| CVE-2024-51550 | 9.8 | Dec 5 | Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT -… Affected: before 3.08.03 |
| CVE-2024-51545 | 9.8 | Dec 5 | Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; … Affected: before 3.08.03 |
| CVE-2024-48845 | 9.8 | Dec 5 | Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. … Affected: before 3.08.03 |
| CVE-2024-48840 | 9.8 | Dec 5 | Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Affected: before 3.08.03 |
| CVE-2024-48839 | 9.8 | Dec 5 | Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Affected: before 3.08.03 |
| CVE-2024-6298 | 9.8 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely Affected: through 3.08.01 |
| CVE-2023-0636 | 9.8 | Jun 5 | Improper Input Validation vulnerability in ABB Ltd Affected: 3.0.0 before 3.07.01 |
| CVE-2023-0635 | 9.8 | Jun 5 | Improper Privilege Management vulnerability in ABB Ltd Affected: 3.0.0 before 3.07.01 |
| CVE-2024-51549 | 9.4 | Dec 5 | Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … Affected: before 3.08.03 |
| CVE-2024-48847 | 9.1 | Dec 5 | MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB… Affected: before 3.08.03 |
| CVE-2024-51548 | 8.8 | Dec 5 | Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Affected: before 3.08.03 |
| CVE-2024-51544 | 8.2 | Dec 5 | Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… Affected: before 3.08.03 |
| CVE-2024-51542 | 8.2 | Dec 5 | Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … Affected: before 3.08.03 |
| CVE-2024-6515 | 8.1 | Dec 5 | Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected… Affected: before 3.08.03 |
| CVE-2024-51546 | 7.5 | Dec 5 | Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX… Affected: before 3.08.03 |
| CVE-2024-51543 | 7.5 | Dec 5 | Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … Affected: before 3.08.03 |
| CVE-2024-51541 | 7.5 | Dec 5 | Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series… Affected: before 3.08.03 |
| CVE-2024-48843 | 7.5 | Dec 5 | Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… Affected: before 3.08.03 |
| CVE-2024-11316 | 7.5 | Dec 5 | Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… Affected: before 3.08.03 |
| CVE-2024-6209 | 7.5 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized Affected: through 3.08.01 |
| CVE-2024-48846 | 7.3 | Dec 5 | Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT -… Affected: before 3.08.03 |
| CVE-2024-48844 | 6.5 | Dec 5 | Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… Affected: before 3.08.03 |
| CVE-2024-6516 | 6.1 | Dec 5 | Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise… Affected: before 3.08.03 |
Showing 28