NetSight
high7.2

CVE-2023-0636

Improper Input Validation vulnerability in ABB Ltd.

Impact

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.

Affected products

VendorProductAffected versions
AbbAspect-Ent-2 Firmware
from 3.0.0 before 3.07.01
AbbAspect-Ent-12 Firmware
from 3.0.0 before 3.07.01
AbbAspect-Ent-256 Firmware
from 3.0.0 before 3.07.01
AbbAspect-Ent-96 Firmware
from 3.0.0 before 3.07.01
AbbNexus-2128 Firmware
from 3.0.0 before 3.07.01
AbbNexus-2128-A Firmware
from 3.0.0 before 3.07.01
AbbNexus-2128-G Firmware
from 3.0.0 before 3.07.01
AbbNexus-2128-F Firmware
from 3.0.0 before 3.07.01
AbbNexus-3-2128 Firmware
from 3.0.0 before 3.07.01
AbbNexus-3-264 Firmware
from 3.0.0 before 3.07.01
AbbNexus-264 Firmware
from 3.0.0 before 3.07.01
AbbNexus-264-A Firmware
from 3.0.0 before 3.07.01

Weakness classification

References