ASPECT Configuration Download Vulnerabilities Allow Access to Dependency Configuration Information
CVE-2024-51542

8.2HIGH

Key Information:

Vendor

Abb

Status
Aspect-enterprise
Nexus Series
Matrix Series
Vendor
CVE Published:
5 December 2024

What is CVE-2024-51542?

A configuration download vulnerability exists in the ABB ASPECT, NEXUS Series, and MATRIX Series products that allows unauthorized access to sensitive dependency configuration information. This vulnerability can lead to exposure of critical system configurations, potentially enabling cyber attackers to exploit the system further. It's crucial for users of the affected versions to evaluate their security posture and apply necessary mitigations to protect sensitive data.

Affected Version(s)

ASPECT-Enterprise Linux 0 <= 3.08.02

MATRIX Series Linux 0 <= 3.08.02

NEXUS Series Linux 0 <= 3.08.02

References

https://search.abb.com/library/Download.aspx?DocumentID=9...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure
.
CVE-2024-51542 : ASPECT Configuration Download Vulnerabilities Allow Access to Dependency Configuration Information