CVE-2025-30170

MEDIUM

ASPECT <3.08.03 - Info Disclosure

Title source: llm

Description

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

References (1)

[Various Sources] https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

Scores

CVSS v3 5.5

EPSS 0.0028

EPSS Percentile 51.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-497

Status published

Products (3)

ABB/ASPECT-Enterprise < 3.08.03

ABB/MATRIX Series < 3.08.03

ABB/NEXUS Series < 3.08.03

Published May 22, 2025

Tracked Since Feb 18, 2026