high8.8Public exploit code
CVE-2024-4007
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials2025-04-03 · webapps · php
Impact
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abb | Aspect-Ent-12 Firmware | before 3.07.02 |
| Abb | Aspect-Ent-2 Firmware | before 3.07.02 |
| Abb | Aspect-Ent-256 Firmware | before 3.07.02 |
| Abb | Aspect-Ent-96 Firmware | before 3.07.02 |
| Abb | Matrix-11 Firmware | before 3.07.02 |
| Abb | Matrix-216 Firmware | before 3.07.02 |
| Abb | Matrix-232 Firmware | before 3.07.02 |
| Abb | Matrix-264 Firmware | before 3.07.02 |
| Abb | Matrix-296 Firmware | before 3.07.02 |
| Abb | Nexus-2128 Firmware | before 3.07.02 |
| Abb | Nexus-264 Firmware | before 3.07.02 |
| Abb | Nexus-3-2128 Firmware | before 3.07.02 |