CVE-2024-6516

Published: Dec 5, 2024Modified: Jun 17, 2026

9.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Red

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:RedShow less

Source: cybersecurity@ch.abb.com (Secondary)

Description

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected (19)

Products: Abb: Aspect Ent 2 Firmware, Aspect Ent 256 Firmware, Aspect Ent 96 Firmware, Nexus 2128 Firmware, Nexus 2128 A Firmware, Nexus 2128 F Firmware, Nexus 2128 G Firmware, Nexus 264 Firmware, Nexus 264 A Firmware, Nexus 264 G Firmware, Nexus 3 2128 Firmware, Aspect Ent 12 Firmware, Nexus 264 F Firmware, Nexus 3 264 Firmware, Matrix 11 Firmware, Matrix 216 Firmware, Matrix 232 Firmware, Matrix 264 Firmware, Matrix 296 Firmware

Abb

19 products

Aspect Ent 2 Firmware

Aspect Ent 256 Firmware

Aspect Ent 96 Firmware

Nexus 2128 Firmware

Nexus 2128 A Firmware

Nexus 2128 F Firmware

Nexus 2128 G Firmware

Nexus 264 Firmware

Nexus 264 A Firmware

Nexus 264 G Firmware

Nexus 3 2128 Firmware

Aspect Ent 12 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 2 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Aspect Ent 2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 256 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Aspect Ent 256	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 96 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Aspect Ent 96	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 2128	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 A Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 2128 A	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 F Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 2128 F	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 2128 G Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 2128 G	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 264	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 A Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 264 A	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 G Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 264 G	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 3 2128 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 3 2128	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Aspect Ent 12 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Aspect Ent 12	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 264 F Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 264 F	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Nexus 3 264 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Nexus 3 264	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 11 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Matrix 11	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 216 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Matrix 216	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 232 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Matrix 232	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 264 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Matrix 264	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Matrix 296 Firmware	Before 3.08.03

Running on/with	Platform Versions
Abb Matrix 296	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

Vendor Advisory

Timeline

No history available yet.