File Corruption Vulnerability in ASPECT Products by ABB
CVE-2025-2409

8.9HIGH

Key Information:

Vendor

Abb

Status
Aspect-enterprise
Nexus Series
Matrix Series
Vendor
CVE Published:
22 May 2025

What is CVE-2025-2409?

A file corruption vulnerability in ABB's ASPECT product line allows attackers to gain control over system files if session administrator credentials are compromised. This can lead to unauthorized modifications and potential takeover of affected systems. The vulnerability spans various product versions, including ASPECT-Enterprise, NEXUS Series, and MATRIX Series, up to version 3.08.03.

Affected Version(s)

ASPECT-Enterprise Linux 0 <= 3.08.03

MATRIX Series Linux 0 <= 3.08.03

NEXUS Series Linux 0 <= 3.08.03

References

https://search.abb.com/library/Download.aspx?DocumentID=9...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.