ASPECT Configuration Download Vulnerabilities Allow Access to Dependency Configuration Information
CVE-2024-51542

8.2HIGH

Key Information:

Vendor

Abb

Vendor
CVE Published:
5 December 2024

What is CVE-2024-51542?

A configuration download vulnerability exists in the ABB ASPECT, NEXUS Series, and MATRIX Series products that allows unauthorized access to sensitive dependency configuration information. This vulnerability can lead to exposure of critical system configurations, potentially enabling cyber attackers to exploit the system further. It's crucial for users of the affected versions to evaluate their security posture and apply necessary mitigations to protect sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

ASPECT-Enterprise Linux 0 <= 3.08.02

MATRIX Series Linux 0 <= 3.08.02

NEXUS Series Linux 0 <= 3.08.02

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure
.