CVE-2024-51554
CRITICALDescription
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-2 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-96_firmware |
| abb | aspect-ent-96 |
| abb | nexus-2128_firmware |
| abb | nexus-2128 |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-g_firmware |
| abb | nexus-2128-g |
| abb | nexus-264_firmware |
| abb | nexus-264 |
| abb | nexus-264-a_firmware |
| abb | nexus-264-a |
| abb | nexus-264-g_firmware |
| abb | nexus-264-g |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-2128 |
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | nexus-264-f_firmware |
| abb | nexus-264-f |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-51554? +
How severe is CVE-2024-51554? +
What products are affected by CVE-2024-51554? +
How do I check if I'm vulnerable to CVE-2024-51554? +
Related Vulnerabilities
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller …
FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp). Five methods (append_dynamic_buffer, append_data_as_pointer, …
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName …
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for …
An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled …
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected …