aspect-ent-2 firmware vulnerabilities and fixes

Recent CVEs affecting aspect-ent-2 firmware, with upgrade or downgrade steps. 27 tracked.

Also searched as: aspect ent 2 firmware, aspect-ent-2firmware.

aspect-ent-2 firmware has 27 tracked vulnerabilities, 16 critical. A fixed release or vendor patch exists for 27. Most recent: 2025-02-06. Highest priority: CVE-2024-51550 (score 73/100).

• CVE-2024-6784 CRITICAL 9.9 UPGRADE UPGRADE Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resour
• CVE-2024-6516 CRITICAL 9.0 UPGRADE UPGRADE Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected in
• CVE-2024-6515 CRITICAL 9.6 UPGRADE UPGRADE Web browser interface may manipulate application username/password in clear text or Base64 encoding providing
• CVE-2024-6298 CRITICAL 10.0 UPGRADE UPGRADE Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX
• CVE-2024-6209 CRITICAL 10.0 UPGRADE UPGRADE Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX
• CVE-2024-51554 CRITICAL 9.1 UPGRADE UPGRADE Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available de
• CVE-2024-51551 CRITICAL 10.0 UPGRADE UPGRADE Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available de
• CVE-2024-51550 CRITICAL 10.0 UPGRADE UPGRADE Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be in
• CVE-2024-51549 CRITICAL 10.0 UPGRADE UPGRADE Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected pr
• CVE-2024-51548 CRITICAL 9.9 UPGRADE UPGRADE Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - En
• CVE-2024-51547 CRITICAL 9.8 UPGRADE UPGRADE Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This
• CVE-2024-51546 HIGH 7.5 UPGRADE UPGRADE Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products:
• CVE-2024-51545 CRITICAL 10.0 UPGRADE UPGRADE Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list f
• CVE-2024-51544 HIGH 8.2 UPGRADE UPGRADE Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affec
• CVE-2024-51543 HIGH 8.2 UPGRADE UPGRADE Information Disclosure vulnerabilities allow access to application configuration information.  Affected produc
• CVE-2024-51542 HIGH 8.2 UPGRADE UPGRADE Configuration Download vulnerabilities allow access to dependency configuration information.  Affected product
• CVE-2024-51541 HIGH 8.2 UPGRADE UPGRADE Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB A
• CVE-2024-4007 HIGH 8.8 UPGRADE UPGRADE Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker
• CVE-2024-48847 HIGH 8.2 UPGRADE UPGRADE MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency cal
• CVE-2024-48846 HIGH 7.1 UPGRADE UPGRADE Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive informati
• CVE-2024-48845 CRITICAL 9.4 UPGRADE UPGRADE Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak password
• CVE-2024-48844 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected
• CVE-2024-48843 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected
• CVE-2024-48840 CRITICAL 10.0 UPGRADE UPGRADE Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise
• CVE-2024-48839 CRITICAL 10.0 UPGRADE UPGRADE Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enter
• CVE-2024-11317 CRITICAL 10.0 UPGRADE UPGRADE Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an
• CVE-2024-11316 HIGH 7.5 UPGRADE UPGRADE Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affec

FAQ

How do I fix aspect-ent-2 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is aspect-ent-2 firmware being exploited right now?

None of the tracked aspect-ent-2 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which aspect-ent-2 firmware CVE should I patch first?

CVE-2024-51550 currently ranks highest (73/100): Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be in.

RSS feed for aspect-ent-2 firmware · ← Back to latest CVEs