nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-13957 CVE-2024-13957
HIGH
SSRF Server Side Request Forgery
Record summary
CVE-2024-13957 has a selected CVSS score of 7.0 (high).
Description
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 22, 2025 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
ASPECT-EnterpriseBrowse ABB / ASPECT-EnterpriseDefault status: affected | CVE List | Through 3.* | affected |
MATRIX SeriesBrowse ABB / MATRIX SeriesDefault status: unaffected | CVE List | Through 3.* | affected |
NEXUS SeriesBrowse ABB / NEXUS SeriesDefault status: unaffected | CVE List | Through 3.* | affected |
References
2search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch