CVE Feed

    Dashboard / CVE / CVE-2024-48845

    CVE-2024-48845

    Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

    Published:Dec 5, 2024
    Last Modified:Dec 5, 2024
    EPS:Dec 5, 2024
    EPSS Score:0.02611
    CVSS Score:9.4

    Affected Products

    Vendor
    Abb
    Product
    Aspect Enterprise
    Vendor
    Abb
    Product
    Matrix Series
    Vendor
    Abb
    Product
    Nexus Series

    Exploits

    https://www.exploit-db.com/exploits/52221

    Common Weakness Enumeration

    CWE-521 Weak Password Requirements

    Related CVEs

    CVE-2025-7679 (CVSS 9.2) — The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT…
    CVE-2025-7677 (CVSS 8.2) — A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users.…
    CVE-2025-53191 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53190 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53189 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53188 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53187 (CVSS 9.3) — Due to an issue in configuration, code that was intended for debugging purposes was included in the market rel…
    CVE-2024-13945 (CVSS 8.4) — Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credent…
    CVE-2024-51552 (CVSS 7.1) — Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issu…
    CVE-2024-13958 (CVSS 4.6) — Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedTh…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High