nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-2410 CVE-2025-2410
HIGH
Admin Authorized Port (iptables) manipulation (open/close/disable ports)
Record summary
CVE-2025-2410 has a selected CVSS score of 8.9 (high).
Description
Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated May 22, 2025 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
ASPECT-EnterpriseBrowse ABB / ASPECT-EnterpriseDefault status: affected | CVE List | Through 3.08.03 | affected |
MATRIX SeriesBrowse ABB / MATRIX SeriesDefault status: unaffected | CVE List | Through 3.08.03 | affected |
NEXUS SeriesBrowse ABB / NEXUS SeriesDefault status: unaffected | CVE List | Through 3.08.03 | affected |
References
2search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch