CVE-2024-6298

Published: Jul 5, 2024Modified: Jun 17, 2026

9.4

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:I/V:C/RE:H/U:Red

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:I/V:C/RE:H/U:RedShow less

Source: cybersecurity@ch.abb.com (Secondary)

Description

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

Affected (19)

Products: Abb: Aspect Ent 12 Firmware, Aspect Ent 2 Firmware, Aspect Ent 256 Firmware, Aspect Ent 96 Firmware, Nexus 2128 Firmware, Nexus 2128 A Firmware, Nexus 2128 F Firmware, Nexus 2128 G Firmware, Nexus 264 Firmware, Nexus 264 A Firmware, Nexus 264 F Firmware, Nexus 264 G Firmware, Nexus 3 2128 Firmware, Nexus 3 264 Firmware, Matrix 11 Firmware, Matrix 216 Firmware, Matrix 232 Firmware, Matrix 264 Firmware, Matrix 296 Firmware

Abb

19 products

Aspect Ent 12 Firmware

Aspect Ent 2 Firmware

Aspect Ent 256 Firmware

Aspect Ent 96 Firmware

Nexus 2128 Firmware

Nexus 2128 A Firmware

Nexus 2128 F Firmware

Nexus 2128 G Firmware

Nexus 3 2128 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 12 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Aspect Ent 12	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 2 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Aspect Ent 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 256 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Aspect Ent 256	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 96 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Aspect Ent 96	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 2128	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 A Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 2128 A	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 F Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 2128 F	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 G Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 2128 G	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 264	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 A Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 264 A	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 F Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 264 F	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 G Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 264 G	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 3 2128 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 3 2128	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 3 264 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Nexus 3 264	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 11 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Matrix 11	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 216 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Matrix 216	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 232 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Matrix 232	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 264 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Matrix 264	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 296 Firmware	Up to 3.08.01

Running on/with	Platform Versions
Abb Matrix 296	All versions

Related CWEs

CWE-1287

Improper Validation of Specified Type of Input

The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (2)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.39956449.23035250.1719878527-141379670.1701144964

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.