Latest CVE Feed
-
4.3
MEDIUMCVE-2024-54127
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successfu... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
8.5
HIGHCVE-2024-54126
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulner... Read more
Affected Products : archer_c50_firmware- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
10.0
CRITICALCVE-2024-51555
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Aug. 28, 2025
-
9.8
CRITICALCVE-2024-51554
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
10.0
CRITICALCVE-2024-51551
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
10.0
CRITICALCVE-2024-51550
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
10.0
CRITICALCVE-2024-51549
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
9.9
CRITICALCVE-2024-51548
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
8.7
HIGHCVE-2024-51546
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
- Published: Dec. 05, 2024
- Modified: Apr. 10, 2025
-
10.0
CRITICALCVE-2024-51545
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
8.8
HIGHCVE-2024-51544
Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
- Published: Dec. 05, 2024
- Modified: Apr. 10, 2025
-
8.8
HIGHCVE-2024-51543
Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
8.8
HIGHCVE-2024-51542
Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
- Published: Dec. 05, 2024
- Modified: Apr. 10, 2025
-
8.8
HIGHCVE-2024-51541
Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
9.1
CRITICALCVE-2024-48847
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
7.3
HIGHCVE-2024-48846
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
9.8
CRITICALCVE-2024-48845
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; ... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
7.7
HIGHCVE-2024-48844
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
7.7
HIGHCVE-2024-48843
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024
-
10.0
CRITICALCVE-2024-48840
Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02... Read more
Affected Products :- Published: Dec. 05, 2024
- Modified: Dec. 05, 2024