CVE Feed

    Dashboard / CVE / CVE-2025-30169

    CVE-2025-30169

    File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

    Published:May 22, 2025
    Last Modified:Apr 15, 2026
    EPS:May 22, 2025
    EPSS Score:0.00264
    CVSS Score:6.7

    Affected Products

    Vendor
    Abb
    Product
    Aspect Enterprise
    Vendor
    Abb
    Product
    Matrix Series
    Vendor
    Abb
    Product
    Nexus Series

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2025-7679 (CVSS 9.2) — The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT…
    CVE-2025-7677 (CVSS 8.2) — A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users.…
    CVE-2025-53191 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53190 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53189 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53188 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53187 (CVSS 9.3) — Due to an issue in configuration, code that was intended for debugging purposes was included in the market rel…
    CVE-2024-13945 (CVSS 8.4) — Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credent…
    CVE-2024-51552 (CVSS 7.1) — Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issu…
    CVE-2024-13958 (CVSS 4.6) — Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedTh…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High