Cross Side Request Forgery, CSRF
Published Dec 5, 2024
7.1
HIGHCVSS 4.0
EPSS 0.64%
Description
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products:
ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Affected products
-
- Version 0StatusaffectedConstraints<=3.08.02
- Version
-
- Version 0StatusaffectedConstraints<=3.08.02
- Version
-
- Version 0StatusaffectedConstraints<=3.08.02
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| ABB | ASPECT-Enterprise | unaffected |
| ||||||
| ABB | MATRIX Series | unaffected |
| ||||||
| ABB | NEXUS Series | unaffected |
|
Configuration 1
- < 3.08.03
Running on/with
- n/a
Configuration 2
- < 3.08.03
Running on/with
- n/a
Configuration 3
- < 3.08.03
Running on/with
- n/a
Configuration 4
- < 3.08.03
Running on/with
- n/a
Configuration 5
- < 3.08.03
Running on/with
- n/a
Configuration 6
- < 3.08.03
Running on/with
- n/a
Configuration 7
- < 3.08.03
Running on/with
- n/a
Configuration 8
- < 3.08.03
Configuration 9
- < 3.08.03
Running on/with
- n/a
Configuration 10
- < 3.08.03
Running on/with
- n/a
Configuration 11
- < 3.08.03
Running on/with
- n/a
Configuration 12
- < 3.08.03
Running on/with
- n/a
Configuration 13
- < 3.08.03
Running on/with
- n/a
Configuration 14
- < 3.08.03
Running on/with
- n/a
Configuration 15
- < 3.08.03
Configuration 16
- < 3.08.03
Running on/with
- n/a
Configuration 17
- < 3.08.03
Running on/with
- n/a
Configuration 18
- < 3.08.03
Running on/with
- n/a
Configuration 19
- < 3.08.03
Running on/with
- n/a
-
- Version 0StatusaffectedConstraints<=3.08.01
- Version
-
- Version 0StatusaffectedConstraints<=3.08.01
- Version
-
- Version 0StatusaffectedConstraints<=3.08.01
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Abb | Aspect Enterprise | n/a |
| ||||||
| Abb | Matrix Series | n/a |
| ||||||
| Abb | Nexus Series | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43165 Advisory
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43165 | Advisory | |
| https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch | Vendor Advisory |
Change history (0)
No recorded changes yet.