CVE-2024-13930: Authenticated Unchecked Loop Condition

Record summary

CVE-2024-13930 has a selected CVSS score of 5.9 (medium).

Description

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 22, 2025 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
ASPECT-Enterprise Browse ABB / ASPECT-Enterprise Default status: affected	CVE List	Through 3.08.03	affected
MATRIX Series Browse ABB / MATRIX Series Default status: unaffected	CVE List	Through 3.08.03	affected
NEXUS Series Browse ABB / NEXUS Series Default status: unaffected	CVE List	Through 3.08.03	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-13930

search.abb.com

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch