critical10.0Public exploit code
CVE-2024-6298
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)2025-04-02 · webapps · multiple
Impact
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abb | Aspect-Ent-12 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-2 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-256 Firmware | through 3.08.01 |
| Abb | Aspect-Ent-96 Firmware | through 3.08.01 |
| Abb | Nexus-2128 Firmware | through 3.08.01 |
| Abb | Nexus-2128-A Firmware | through 3.08.01 |
| Abb | Nexus-2128-F Firmware | through 3.08.01 |
| Abb | Nexus-2128-G Firmware | through 3.08.01 |
| Abb | Nexus-264 Firmware | through 3.08.01 |
| Abb | Nexus-264-A Firmware | through 3.08.01 |
| Abb | Nexus-264-F Firmware | through 3.08.01 |
| Abb | Nexus-264-G Firmware | through 3.08.01 |
Weakness classification
References
- NVD record
- CVE.org record
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
- https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.39956449.23035250.1719878527-141379670.1701144964