CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Score

CVSS 3.1 9.6 Critical

Status

Analyzed - cybersecurity@ch.abb.com

Published

2024-12-05

Last modified

2024-12-05

Weaknesses

CWE-319

Affected products

• Aspect-ent-12 Firmware (Abb)
• Aspect-ent-256 Firmware (Abb)
• Aspect-ent-2 Firmware (Abb)
• Aspect-ent-96 Firmware (Abb)
• Aspect-enterprise (Abb)
• Aspect Enterprise (Abb)
• Matrix-11 Firmware (Abb)
• Matrix-216 Firmware (Abb)
• Matrix-232 Firmware (Abb)
• Matrix-264 Firmware (Abb)
• Matrix-296 Firmware (Abb)
• Matrix Series (Abb)
• Nexus-2128-a Firmware (Abb)
• Nexus-2128-f Firmware (Abb)
• Nexus-2128-g Firmware (Abb)
• Nexus-2128 Firmware (Abb)
• Nexus-264-a Firmware (Abb)
• Nexus-264-f Firmware (Abb)
• Nexus-264-g Firmware (Abb)
• Nexus-264 Firmware (Abb)
• Nexus-3-2128 Firmware (Abb)
• Nexus-3-264 Firmware (Abb)
• Nexus Series (Abb)

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch