Browse CVEs

HIGH 7.4 CVE-2025-14774 Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. T Mac Plus Mitigation only Fix from $1,9502026-06-03 HIGH 8.8 CVE-2025-14772 Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. T Mac Plus Mitigation only Fix from $1,9502026-06-03 MEDIUM 5.4 CVE-2025-14773 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus:… T Mac Plus Mitigation only Fix from $1,6002026-06-03 CRITICAL 9.9 CVE-2025-14771 Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. T Mac Plus Mitigation only Fix from $2,3002026-06-03 MEDIUM 5.5 CVE-2025-3395 Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue … Automation Builder after 2.8.0 Fix from $1,6002025-04-30 HIGH 7.8 CVE-2025-3394 Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0. Automation Builder after 2.8.0 Fix from $1,9502025-04-30 CRITICAL 9.8 CVE-2024-51547 Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: throu… Aspect Ent 2 Firmware after 3.08.03 Fix from $2,3002025-02-06 CRITICAL 9.9 CVE-2024-6784 Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosu… Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 HIGH 8.1 CVE-2024-6515 Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended cre… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,9502024-12-05 MEDIUM 6.1 CVE-2024-6516 Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,6002024-12-05 CRITICAL 10.0 CVE-2024-51551 Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: … Aspect Ent 2 Firmware after 3.07.02 Fix from $2,3002024-12-05 CRITICAL 9.8 CVE-2024-51550 Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected p… Aspect Ent 12 Firmware 3.08.03+ Fix from $2,3002024-12-05 CRITICAL 9.8 CVE-2024-51554 Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: … Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 CRITICAL 9.4 CVE-2024-51549 Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products: ABB ASPECT - Enterprise v3.08… Aspect Ent 12 Firmware 3.08.03+ Fix from $2,3002024-12-05 HIGH 8.8 CVE-2024-51548 Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.… Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 HIGH 7.5 CVE-2024-51546 Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEX… Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 CRITICAL 9.8 CVE-2024-51545 Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASP… Aspect Ent 12 Firmware 3.08.03+ Fix from $2,3002024-12-05 CRITICAL 9.1 CVE-2024-48847 MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashe… Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 HIGH 8.2 CVE-2024-51542 Configuration Download vulnerabilities allow access to dependency configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02; … Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 HIGH 8.2 CVE-2024-51544EPSS 14% Service Control vulnerabilities allow access to service restart requests and vm configuration settings.  Affected products: ABB ASPECT - Enterprise… Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 HIGH 7.5 CVE-2024-51541 Local File Inclusion vulnerabilities allow access to sensitive system information.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Ser… Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 HIGH 7.5 CVE-2024-51543 Information Disclosure vulnerabilities allow access to application configuration information.  Affected products: ABB ASPECT - Enterprise v3.08.02;… Aspect Ent 12 Firmware 3.08.03+ Fix from $1,9502024-12-05 CRITICAL 9.8 CVE-2024-48839 Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02;… Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 CRITICAL 9.8 CVE-2024-48840 Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MAT… Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 CRITICAL 9.8 CVE-2024-48845 Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized a… Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 HIGH 7.5 CVE-2024-48843 Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,9502024-12-05 HIGH 7.3 CVE-2024-48846 Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affect… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,9502024-12-05 MEDIUM 6.5 CVE-2024-48844 Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,6002024-12-05 CRITICAL 10.0 CVE-2024-11317 Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a … Aspect Ent 2 Firmware 3.08.03+ Fix from $2,3002024-12-05 HIGH 7.5 CVE-2024-11316 Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - Enterprise… Aspect Ent 2 Firmware 3.08.03+ Fix from $1,9502024-12-05