PatchTheCVEnexus-2128-a firmware vulnerabilities and fixes
Recent CVEs affecting nexus-2128-a firmware, with upgrade or downgrade steps. 24 tracked.
Also searched as: nexus 2128 a firmware, nexus-2128-afirmware.
nexus-2128-a firmware has 24 tracked vulnerabilities, 14 critical. A fixed release or vendor patch exists for 24. Most recent: 2025-02-06. Highest priority: CVE-2024-51550 (score 73/100).
- CVE-2024-6784 CRITICAL 9.9 UPGRADE UPGRADE Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resour
- CVE-2024-6516 CRITICAL 9.0 UPGRADE UPGRADE Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected in
- CVE-2024-6515 CRITICAL 9.6 UPGRADE UPGRADE Web browser interface may manipulate application username/password in clear text or Base64 encoding providing
- CVE-2024-51554 CRITICAL 9.1 UPGRADE UPGRADE Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available de
- CVE-2024-51551 CRITICAL 10.0 UPGRADE UPGRADE Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available de
- CVE-2024-51550 CRITICAL 10.0 UPGRADE UPGRADE Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be in
- CVE-2024-51549 CRITICAL 10.0 UPGRADE UPGRADE Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected pr
- CVE-2024-51548 CRITICAL 9.9 UPGRADE UPGRADE Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - En
- CVE-2024-51547 CRITICAL 9.8 UPGRADE UPGRADE Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This
- CVE-2024-51546 HIGH 7.5 UPGRADE UPGRADE Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products:
- CVE-2024-51545 CRITICAL 10.0 UPGRADE UPGRADE Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list f
- CVE-2024-51544 HIGH 8.2 UPGRADE UPGRADE Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affec
- CVE-2024-51543 HIGH 8.2 UPGRADE UPGRADE Information Disclosure vulnerabilities allow access to application configuration information. Affected produc
- CVE-2024-51542 HIGH 8.2 UPGRADE UPGRADE Configuration Download vulnerabilities allow access to dependency configuration information. Affected product
- CVE-2024-51541 HIGH 8.2 UPGRADE UPGRADE Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB A
- CVE-2024-48847 HIGH 8.2 UPGRADE UPGRADE MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency cal
- CVE-2024-48846 HIGH 7.1 UPGRADE UPGRADE Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive informati
- CVE-2024-48845 CRITICAL 9.4 UPGRADE UPGRADE Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak password
- CVE-2024-48844 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected
- CVE-2024-48843 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected
- CVE-2024-48840 CRITICAL 10.0 UPGRADE UPGRADE Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise
- CVE-2024-48839 CRITICAL 10.0 UPGRADE UPGRADE Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enter
- CVE-2024-11317 CRITICAL 10.0 UPGRADE UPGRADE Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an
- CVE-2024-11316 HIGH 7.5 UPGRADE UPGRADE Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affec
FAQ
How do I fix nexus-2128-a firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nexus-2128-a firmware being exploited right now?
None of the tracked nexus-2128-a firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nexus-2128-a firmware CVE should I patch first?
CVE-2024-51550 currently ranks highest (73/100): Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be in.