Description
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
Published: 2025-02-06
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-45734 Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
History

Fri, 23 May 2025 10:30:00 +0000


Fri, 23 May 2025 09:45:00 +0000

Type Values Removed Values Added
Description Credentials/keys may be disclosed in ASPECT exposing sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
References
Metrics cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'}

cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}


Thu, 22 May 2025 19:45:00 +0000


Thu, 22 May 2025 18:30:00 +0000

Type Values Removed Values Added
Description Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Credentials/keys may be disclosed in ASPECT exposing sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
Title Hard-coded Credentials Credentials Disclosure - keys
Weaknesses CWE-312
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

cvssV3_1

{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'}


Thu, 10 Apr 2025 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Abb
Abb aspect-ent-12
Abb aspect-ent-12 Firmware
Abb aspect-ent-2
Abb aspect-ent-256
Abb aspect-ent-256 Firmware
Abb aspect-ent-2 Firmware
Abb aspect-ent-96
Abb aspect-ent-96 Firmware
Abb matrix-11
Abb matrix-11 Firmware
Abb matrix-216
Abb matrix-216 Firmware
Abb matrix-232
Abb matrix-232 Firmware
Abb matrix-264
Abb matrix-264 Firmware
Abb matrix-296
Abb matrix-296 Firmware
Abb nexus-2128
Abb nexus-2128-a
Abb nexus-2128-a Firmware
Abb nexus-2128-f
Abb nexus-2128-f Firmware
Abb nexus-2128-g
Abb nexus-2128-g Firmware
Abb nexus-2128 Firmware
Abb nexus-264
Abb nexus-264-a
Abb nexus-264-a Firmware
Abb nexus-264-f
Abb nexus-264-f Firmware
Abb nexus-264-g
Abb nexus-264-g Firmware
Abb nexus-264 Firmware
Abb nexus-3-2128
Abb nexus-3-2128 Firmware
Abb nexus-3-264
Abb nexus-3-264 Firmware
CPEs cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:*
cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:*
cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:*
Vendors & Products Abb
Abb aspect-ent-12
Abb aspect-ent-12 Firmware
Abb aspect-ent-2
Abb aspect-ent-256
Abb aspect-ent-256 Firmware
Abb aspect-ent-2 Firmware
Abb aspect-ent-96
Abb aspect-ent-96 Firmware
Abb matrix-11
Abb matrix-11 Firmware
Abb matrix-216
Abb matrix-216 Firmware
Abb matrix-232
Abb matrix-232 Firmware
Abb matrix-264
Abb matrix-264 Firmware
Abb matrix-296
Abb matrix-296 Firmware
Abb nexus-2128
Abb nexus-2128-a
Abb nexus-2128-a Firmware
Abb nexus-2128-f
Abb nexus-2128-f Firmware
Abb nexus-2128-g
Abb nexus-2128-g Firmware
Abb nexus-2128 Firmware
Abb nexus-264
Abb nexus-264-a
Abb nexus-264-a Firmware
Abb nexus-264-f
Abb nexus-264-f Firmware
Abb nexus-264-g
Abb nexus-264-g Firmware
Abb nexus-264 Firmware
Abb nexus-3-2128
Abb nexus-3-2128 Firmware
Abb nexus-3-264
Abb nexus-3-264 Firmware

Thu, 06 Feb 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 06 Feb 2025 04:30:00 +0000

Type Values Removed Values Added
Description Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Title Hard-coded Credentials
Weaknesses CWE-798
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}


Subscriptions

Abb Aspect-ent-12 Aspect-ent-12 Firmware Aspect-ent-2 Aspect-ent-256 Aspect-ent-256 Firmware Aspect-ent-2 Firmware Aspect-ent-96 Aspect-ent-96 Firmware Matrix-11 Matrix-11 Firmware Matrix-216 Matrix-216 Firmware Matrix-232 Matrix-232 Firmware Matrix-264 Matrix-264 Firmware Matrix-296 Matrix-296 Firmware Nexus-2128 Nexus-2128-a Nexus-2128-a Firmware Nexus-2128-f Nexus-2128-f Firmware Nexus-2128-g Nexus-2128-g Firmware Nexus-2128 Firmware Nexus-264 Nexus-264-a Nexus-264-a Firmware Nexus-264-f Nexus-264-f Firmware Nexus-264-g Nexus-264-g Firmware Nexus-264 Firmware Nexus-3-2128 Nexus-3-2128 Firmware Nexus-3-264 Nexus-3-264 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: ABB

Published:

Updated: 2025-05-23T09:23:26.967Z

Reserved: 2024-10-29T11:48:54.543Z

Link: CVE-2024-51547

cve-icon Vulnrichment

Updated: 2025-02-06T14:33:35.333Z

cve-icon NVD

Status : Modified

Published: 2025-02-06T05:15:12.850

Modified: 2025-05-23T10:15:20.647

Link: CVE-2024-51547

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses