Predictable Filename Vulnerabilities in ASPECT, NEXUS, and MATRIX by ABB
CVE-2024-13952

8.7HIGH

Key Information:

Vendor

Abb

Status
Aspect-enterprise
Nexus Series
Matrix Series
Vendor
CVE Published:
22 May 2025

What is CVE-2024-13952?

The predictable filename vulnerabilities in ABB's ASPECT, NEXUS, and MATRIX products may lead to unauthorized access to sensitive information. If an attacker manages to compromise administrative credentials, they could exploit these vulnerabilities to access files based on predictable naming patterns, potentially revealing confidential data. This issue affects specific versions of ASPECT-Enterprise and the NEXUS and MATRIX Series.

Affected Version(s)

ASPECT-Enterprise Linux 0 <= 3.*

MATRIX Series Linux 0 <= 3.*

NEXUS Series Linux 0 <= 3.*

References

https://search.abb.com/library/Download.aspx?DocumentID=9...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure
.
CVE-2024-13952 : Predictable Filename Vulnerabilities in ASPECT, NEXUS, and MATRIX by ABB