Server Side Request Forgery Vulnerability in ASPECT and NEXUS Products
CVE-2024-13957
7HIGH
What is CVE-2024-13957?
A Server Side Request Forgery (SSRF) vulnerability exists in ABB's ASPECT, NEXUS, and MATRIX product lines. This flaw arises when an attacker exploits compromised administrator credentials, allowing them to make unauthorized requests from a vulnerable server. Such attacks can lead to unauthorized data access or system manipulation, underscoring the necessity for immediate remedial actions to fortify these systems against potential exploitation.
Affected Version(s)
ASPECT-Enterprise Linux 0 <= 3.*
MATRIX Series Linux 0 <= 3.*
NEXUS Series Linux 0 <= 3.*
References
CVSS V4
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure