Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-48793 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-15T20:46:14.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in INATRONIC com.inatronic.bmw 2.7.1 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drivedeck.de/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.inatronic.bmw/com.inatronic.bmw.md
CVE ID: CVE-2024-48795 State: PUBLISHED Published: 2024-10-14T00:00:00 Last Updated: 2024-10-16T19:24:00.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hk.creative.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.creative.apps.xficonnect/com.creative.apps.xficonnect.md
CVE ID: CVE-2024-48796 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-13T14:28:46.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in EQUES com.eques.plug 1.0.1 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.eques.cn/?lang=en - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.eques.plug/com.eques.plug.md
CVE ID: CVE-2024-48797 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-25T14:12:52.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PCS Engineering Preston Cinema (com.prestoncinema.app) 0.2.0 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.pcsengineering.net/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.prestoncinema.app/com.prestoncinema.app.md
CVE ID: CVE-2024-48798 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-24T17:13:57.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Hubble Connected (com.hubbleconnected.vervelife) 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hubbleconnected.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.hubbleconnected.vervelife/com.hubbleconnected.vervelife.md
CVE ID: CVE-2024-48799 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-24T16:35:00.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to obtain sensitive information via the firmware update process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.lorex.com/ - https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.lorexcorp.lorexping/com.lorexcorp.lorexping.md
CVE ID: CVE-2024-48806 State: PUBLISHED Published: 2025-01-09T00:00:00 Last Updated: 2025-01-16T18:48:39.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Neat Board NFC v.1.20240620.0015 allows a physically proximate attackers to escalate privileges via a crafted payload to the password field Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.neat.no/article/devices-running-microsoft-teams-allow-for-buffer-overflow-vulnerability/
CVE ID: CVE-2024-48807 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:04:08.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/doctor-appointment-management-system-using-php-and-mysql/ - https://medium.com/%40KrishnaChaganti/cross-site-scripting-xss-in-appointment-management-system-cve-2024-48807-0f7523be9fa2
CVE ID: CVE-2024-48809 State: PUBLISHED Published: 2024-11-04T00:00:00 Last Updated: 2024-11-05T21:18:03.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/onosproject/sdran-in-a-box/issues/206 - https://gist.github.com/bergen876/5a21f78e266c12aa2586beb2178443b0
CVE ID: CVE-2024-48813 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-11T17:29:45.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the admin_id parameter of the /update-employee.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/lssrain/taskmatic/issues/IAUXOL
CVE ID: CVE-2024-48814 State: PUBLISHED Published: 2025-01-03T00:00:00 Last Updated: 2025-01-03T19:15:14.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Silverpeas/Silverpeas-Core/pull/1353 - https://github.com/Silverpeas/Silverpeas-Components/pull/859 - https://gist.github.com/SubZ3r0-0x01/7150f7cbc3b7d810adb221cae3d08fc8
CVE ID: CVE-2024-48818 State: PUBLISHED Published: 2025-03-25T00:00:00.000Z Last Updated: 2025-03-26T15:07:14.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in IIT Bombay, Mumbai, India Bodhitree of cs101 version allows a remote attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://packetstorm.news/files/id/183309
CVE ID: CVE-2024-48821 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-24T17:36:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE ID: CVE-2024-48822 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-18T18:38:47.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege escalation in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the FtpConfig.php page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE ID: CVE-2024-48823 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-15T15:12:51.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local file inclusion in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to escalate privileges via the PassageAutoServer.php page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE ID: CVE-2024-48824 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-20T20:36:40.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to obtain sensitive information via the Racine & FileName parameters in the download-file.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software/
CVE ID: CVE-2024-48825 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:43:24.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ixout/iotVuls/blob/main/Tenda/ac7_005/report.md
CVE ID: CVE-2024-48826 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:42:18.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ixout/iotVuls/blob/main/Tenda/ac7_006/report.md
CVE ID: CVE-2024-48827 State: PUBLISHED Published: 2024-10-11T00:00:00 Last Updated: 2024-10-11T17:19:27.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sbondCo/Watcharr - https://github.com/sbondCo/Watcharr/releases/tag/v1.43.0 - https://github.com/yamerooo123/CVE/blob/main/CVE-2024-48827/Description.md
CVE ID: CVE-2024-48828 State: PUBLISHED Published: 2025-03-17T17:10:05.434Z Last Updated: 2025-03-17T18:55:31.578Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-269 Description: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networki
ichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48829 State: PUBLISHED Published: 2025-11-12T19:50:02.934Z Last Updated: 2025-11-13T04:55:37.698Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-94 Description: Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-
ment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48830 State: PUBLISHED Published: 2025-03-17T16:56:13.657Z Last Updated: 2025-03-21T16:11:10.825Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-77 Description: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/0002899
ution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities - https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48831 State: PUBLISHED Published: 2025-03-17T18:00:49.231Z Last Updated: 2025-03-17T18:26:59.323Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-259 Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, contain(s) a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48837 State: PUBLISHED Published: 2024-11-12T03:31:57.900Z Last Updated: 2024-11-12T15:18:07.535Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-250 Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-netwo
lnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48838 State: PUBLISHED Published: 2024-11-12T03:36:39.510Z Last Updated: 2024-11-12T14:21:50.167Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-552 Description: Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-secu
alyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2024-48839 State: PUBLISHED Published: 2024-12-05T12:37:28.554Z Last Updated: 2024-12-05T18:49:41.865Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-94 Description: Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48840 State: PUBLISHED Published: 2024-12-05T12:38:46.342Z Last Updated: 2024-12-05T18:49:34.017Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-94 Description: Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48841 State: PUBLISHED Published: 2025-01-27T19:25:44.530Z Last Updated: 2025-02-14T12:28:59.021Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: FLXEON Problem Types: CWE-77 Description: Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A5684&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE ID: CVE-2024-48842 State: PUBLISHED Published: 2025-09-17T14:48:21.712Z Last Updated: 2025-09-17T15:05:59.325Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: FLXEON Problem Types: CWE-798 Description: Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A7121&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2024-48843 State: PUBLISHED Published: 2024-12-05T12:40:01.071Z Last Updated: 2024-12-05T18:49:24.745Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-770 Description: Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48844 State: PUBLISHED Published: 2024-12-05T12:41:12.507Z Last Updated: 2024-12-05T18:49:17.567Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-770 Description: Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48845 State: PUBLISHED Published: 2024-12-05T12:42:14.225Z Last Updated: 2024-12-05T18:49:08.072Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-521 Description: Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7
alyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48846 State: PUBLISHED Published: 2024-12-05T12:43:20.544Z Last Updated: 2024-12-05T18:48:59.598Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-352 Description: Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId
nt: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48847 State: PUBLISHED Published: 2024-12-05T12:44:09.099Z Last Updated: 2024-12-05T15:49:11.073Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-328 Description: MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&Docu
Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2024-48848 State: PUBLISHED Published: 2025-05-22T18:18:03.426Z Last Updated: 2025-05-22T18:41:30.763Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-774 Description: Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCo
CVE ID: CVE-2024-48849 State: PUBLISHED Published: 2025-01-29T18:23:59.435Z Last Updated: 2025-01-29T18:46:37.360Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: ABB Products: FLXEON Problem Types: CWE-1385 Description: Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A5684&LanguageCode=en&DocumentPartId=PDF&Action=Launch
CVE ID: CVE-2024-48850 State: PUBLISHED Published: 2025-05-22T16:45:45.409Z Last Updated: 2025-05-22T17:30:39.471Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: ASPECT-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-36 Description: Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch