high7.5Public exploit code
CVE-2024-51546
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure2025-04-15 · hardware · multiple
Impact
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abb | Aspect-Ent-12 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-2 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-256 Firmware | before 3.08.03 |
| Abb | Aspect-Ent-96 Firmware | before 3.08.03 |
| Abb | Nexus-2128 Firmware | before 3.08.03 |
| Abb | Nexus-2128-A Firmware | before 3.08.03 |
| Abb | Nexus-2128-F Firmware | before 3.08.03 |
| Abb | Nexus-2128-G Firmware | before 3.08.03 |
| Abb | Nexus-264 Firmware | before 3.08.03 |
| Abb | Nexus-264-A Firmware | before 3.08.03 |
| Abb | Nexus-264-F Firmware | before 3.08.03 |
| Abb | Nexus-264-G Firmware | before 3.08.03 |