Weak Password Reset Rules Vulnerability Could Facilitate Unauthorized Access
CVE-2024-48845
9.4CRITICAL
Key Information
- Vendor
- Abb
- Status
- Aspect-enterprise
- Nexus Series
- Matrix Series
- Vendor
- CVE Published:
- 5 December 2024
Summary
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
Affected Version(s)
ASPECT-Enterprise <= 3.07.02
NEXUS Series <= 3.07.02
MATRIX Series <= 3.07.02
CVSS V3.1
Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Risk change from: null to: 9.4 - (CRITICAL)
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure