CVE-2024-48847

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cybersecurity@ch.abb.com

Published

2024-12-05

Last modified

2024-12-05

Weaknesses

CWE-327, CWE-328

Affected products

• Aspect-ent-12 Firmware (Abb)
• Aspect-ent-256 Firmware (Abb)
• Aspect-ent-2 Firmware (Abb)
• Aspect-ent-96 Firmware (Abb)
• Aspect-enterprise (Abb)
• Aspect Enterprise (Abb)
• Matrix-11 Firmware (Abb)
• Matrix-216 Firmware (Abb)
• Matrix-232 Firmware (Abb)
• Matrix-264 Firmware (Abb)
• Matrix-296 Firmware (Abb)
• Matrix Series (Abb)
• Nexus-2128-a Firmware (Abb)
• Nexus-2128-f Firmware (Abb)
• Nexus-2128-g Firmware (Abb)
• Nexus-2128 Firmware (Abb)
• Nexus-264-a Firmware (Abb)
• Nexus-264-f Firmware (Abb)
• Nexus-264-g Firmware (Abb)
• Nexus-264 Firmware (Abb)
• Nexus-3-2128 Firmware (Abb)
• Nexus-3-264 Firmware (Abb)
• Nexus Series (Abb)

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch