CVE-2024-48840 - Unauthorized Access

Back Back to CVE browser

CRITICAL

Unauthorized Access

Published Dec 5, 2024

9.3

CRITICAL

CVSS 4.0

EPSS 2.06%

Description

Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

Vendor ABB Product ASPECT-Enterprise Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.08.02
Vendor ABB Product MATRIX Series Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.08.02
Vendor ABB Product NEXUS Series Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.08.02

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ABB

ASPECT-Enterprise

unaffected

Version	Status	Constraints
0	affected	<=3.08.02

ABB

MATRIX Series

unaffected

Version	Status	Constraints
0	affected	<=3.08.02

ABB

NEXUS Series

unaffected

Version	Status	Constraints
0	affected	<=3.08.02

Vendor Abb Product Aspect Enterprise Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.08.01
Vendor Abb Product Matrix Series Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.08.01
Vendor Abb Product Nexus Series Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.08.01

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Abb

Aspect Enterprise

n/a

Version	Status	Constraints
0	affected	<=3.08.01

Abb

Matrix Series

n/a

Version	Status	Constraints
0	affected	<=3.08.01

Abb

Nexus Series

n/a

Version	Status	Constraints
0	affected	<=3.08.01

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
Vendor Advisory

Link	Providers	Tags
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Dec 5, 2024

Updated Dec 5, 2024

Reserved Oct 8, 2024

Link CVE-2024-48840

CISA Vulnrichment

Updated Dec 5, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-48840

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-48840