critical10.0
CVE-2024-11317
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.
Impact
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abb | Aspect-Ent-2 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-256 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-96 Firmware | before 3.08.03 |
| Abb | Nexus-2128 Firmware | before 3.08.03 |
| Abb | Nexus-2128-A Firmware | before 3.08.03 |
| Abb | Nexus-2128-F Firmware | before 3.08.03 |
| Abb | Nexus-2128-G Firmware | before 3.08.03 |
| Abb | Nexus-264 Firmware | before 3.08.03 |
| Abb | Nexus-264-A Firmware | before 3.08.03 |
| Abb | Nexus-264-G Firmware | before 3.08.03 |
| Abb | Nexus-3-2128 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-12 Firmware | before 3.08.03 |