https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-51547.htmlhttps://patchthecve.com/cve/CVE-2024-51547.htmlWed, 17 Jun 2026 08:05:53 +0000CRITICAL 9.8: Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.https://patchthecve.com/cve/CVE-2024-6784.htmlhttps://patchthecve.com/cve/CVE-2024-6784.htmlWed, 17 Jun 2026 08:18:42 +0000CRITICAL 9.9: Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-6516.htmlhttps://patchthecve.com/cve/CVE-2024-6516.htmlWed, 17 Jun 2026 08:18:09 +0000CRITICAL 9.0: Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-6515.htmlhttps://patchthecve.com/cve/CVE-2024-6515.htmlWed, 17 Jun 2026 08:18:09 +0000CRITICAL 9.6: Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51554.htmlhttps://patchthecve.com/cve/CVE-2024-51554.htmlWed, 17 Jun 2026 08:05:54 +0000CRITICAL 9.1: Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51551.htmlhttps://patchthecve.com/cve/CVE-2024-51551.htmlWed, 17 Jun 2026 08:05:54 +0000CRITICAL 10.0: Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02https://patchthecve.com/cve/CVE-2024-51550.htmlhttps://patchthecve.com/cve/CVE-2024-51550.htmlWed, 17 Jun 2026 08:05:54 +0000CRITICAL 10.0: Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51549.htmlhttps://patchthecve.com/cve/CVE-2024-51549.htmlWed, 17 Jun 2026 08:05:54 +0000CRITICAL 10.0: Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51548.htmlhttps://patchthecve.com/cve/CVE-2024-51548.htmlWed, 17 Jun 2026 08:05:54 +0000CRITICAL 9.9: Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51546.htmlhttps://patchthecve.com/cve/CVE-2024-51546.htmlWed, 17 Jun 2026 08:05:53 +0000HIGH 7.5: Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51545.htmlhttps://patchthecve.com/cve/CVE-2024-51545.htmlWed, 17 Jun 2026 08:05:53 +0000CRITICAL 10.0: Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51544.htmlhttps://patchthecve.com/cve/CVE-2024-51544.htmlWed, 17 Jun 2026 08:05:53 +0000HIGH 8.2: Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51543.htmlhttps://patchthecve.com/cve/CVE-2024-51543.htmlWed, 17 Jun 2026 08:05:53 +0000HIGH 8.2: Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51542.htmlhttps://patchthecve.com/cve/CVE-2024-51542.htmlWed, 17 Jun 2026 08:05:53 +0000HIGH 8.2: Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-51541.htmlhttps://patchthecve.com/cve/CVE-2024-51541.htmlWed, 17 Jun 2026 08:05:52 +0000HIGH 8.2: Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-48847.htmlhttps://patchthecve.com/cve/CVE-2024-48847.htmlWed, 17 Jun 2026 07:58:53 +0000HIGH 8.2: MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.  Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01https://patchthecve.com/cve/CVE-2024-48846.htmlhttps://patchthecve.com/cve/CVE-2024-48846.htmlWed, 17 Jun 2026 07:58:52 +0000HIGH 7.1: Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-48845.htmlhttps://patchthecve.com/cve/CVE-2024-48845.htmlWed, 17 Jun 2026 07:58:52 +0000CRITICAL 9.4: Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02https://patchthecve.com/cve/CVE-2024-48844.htmlhttps://patchthecve.com/cve/CVE-2024-48844.htmlWed, 17 Jun 2026 07:58:52 +0000HIGH 7.7: Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-48843.htmlhttps://patchthecve.com/cve/CVE-2024-48843.htmlWed, 17 Jun 2026 07:58:52 +0000HIGH 7.7: Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-48840.htmlhttps://patchthecve.com/cve/CVE-2024-48840.htmlWed, 17 Jun 2026 07:58:52 +0000CRITICAL 10.0: Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-48839.htmlhttps://patchthecve.com/cve/CVE-2024-48839.htmlWed, 17 Jun 2026 07:58:51 +0000CRITICAL 10.0: Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-11317.htmlhttps://patchthecve.com/cve/CVE-2024-11317.htmlWed, 17 Jun 2026 06:57:31 +0000CRITICAL 10.0: Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-11316.htmlhttps://patchthecve.com/cve/CVE-2024-11316.htmlWed, 17 Jun 2026 06:57:31 +0000HIGH 7.5: Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02https://patchthecve.com/cve/CVE-2024-6298.htmlhttps://patchthecve.com/cve/CVE-2024-6298.htmlWed, 17 Jun 2026 08:17:44 +0000CRITICAL 10.0: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotelyhttps://patchthecve.com/cve/CVE-2024-6209.htmlhttps://patchthecve.com/cve/CVE-2024-6209.htmlWed, 17 Jun 2026 08:17:31 +0000CRITICAL 10.0: Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized