PatchTheCVEnexus-2128-f firmware vulnerabilities and fixes
Recent CVEs affecting nexus-2128-f firmware, with upgrade or downgrade steps. 14 tracked.
Also searched as: nexus 2128 f firmware, nexus-2128-ffirmware.
nexus-2128-f firmware has 14 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-02-06. Highest priority: CVE-2024-48839 (score 70/100).
- CVE-2024-6784 CRITICAL 9.9 UPGRADE UPGRADE Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resour
- CVE-2024-6516 CRITICAL 9.0 UPGRADE UPGRADE Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected in
- CVE-2024-6515 CRITICAL 9.6 UPGRADE UPGRADE Web browser interface may manipulate application username/password in clear text or Base64 encoding providing
- CVE-2024-51554 CRITICAL 9.1 UPGRADE UPGRADE Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available de
- CVE-2024-51547 CRITICAL 9.8 UPGRADE UPGRADE Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This
- CVE-2024-48847 HIGH 8.2 UPGRADE UPGRADE MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency cal
- CVE-2024-48846 HIGH 7.1 UPGRADE UPGRADE Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive informati
- CVE-2024-48845 CRITICAL 9.4 UPGRADE UPGRADE Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak password
- CVE-2024-48844 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected
- CVE-2024-48843 HIGH 7.7 UPGRADE UPGRADE Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected
- CVE-2024-48840 CRITICAL 10.0 UPGRADE UPGRADE Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise
- CVE-2024-48839 CRITICAL 10.0 UPGRADE UPGRADE Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enter
- CVE-2024-11317 CRITICAL 10.0 UPGRADE UPGRADE Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an
- CVE-2024-11316 HIGH 7.5 UPGRADE UPGRADE Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affec
FAQ
How do I fix nexus-2128-f firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nexus-2128-f firmware being exploited right now?
None of the tracked nexus-2128-f firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nexus-2128-f firmware CVE should I patch first?
CVE-2024-48839 currently ranks highest (70/100): Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enter.