critical10.0Public exploit code
CVE-2024-6209
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unau…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ABB Cylon Aspect 3.08.01 - Arbitrary File Delete2025-04-02 · webapps · php
Impact
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abb | Aspect-Ent-12 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-2 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-256 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-96 Firmware | through 3.08.01 |
| Abb | Nexus-2128 Firmware | through 3.08.01 |
| Abb | Nexus-2128-A Firmware | through 3.08.01 |
| Abb | Nexus-2128-F Firmware | through 3.08.01 |
| Abb | Nexus-2128-G Firmware | through 3.08.01 |
| Abb | Nexus-264 Firmware | through 3.08.01 |
| Abb | Nexus-264-A Firmware | through 3.08.01 |
| Abb | Nexus-264-F Firmware | through 3.08.01 |
| Abb | Nexus-264-G Firmware | through 3.08.01 |
Weakness classification
References
- NVD record
- CVE.org record
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.39956449.23035250.1719878527-141379670.1701144964