CVE-2024-6298
CRITICAL EXPLOITEDABB ASPECT Enterprise, NEXUS Series, MATRIX Series <3.08.01 - Unauthorized File Access
Title source: llmDescription
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely
Exploits (1)
References (2)
Scores
CVSS v3
10.0
EPSS
0.3497
EPSS Percentile
97.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
VulnCheck KEV
2025-02-02
CWE
CWE-1287
Status
published
Products (19)
abb/aspect-ent-12_firmware
< 3.08.01
abb/aspect-ent-256_firmware
< 3.08.01
abb/aspect-ent-2_firmware
< 3.08.01
abb/aspect-ent-96_firmware
< 3.08.01
abb/matrix-11_firmware
< 3.08.01
abb/matrix-216_firmware
< 3.08.01
abb/matrix-232_firmware
< 3.08.01
abb/matrix-264_firmware
< 3.08.01
abb/matrix-296_firmware
< 3.08.01
abb/nexus-2128-a_firmware
< 3.08.01
... and 9 more
Published
Jul 05, 2024
Tracked Since
Feb 18, 2026