CVE Feed

    Dashboard / CVE / CVE-2025-53187

    CVE-2025-53187

    Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prior authentication. This issue affects all versions of ASPECT prior to 3.08.04-s01

    Published:Aug 11, 2025
    Last Modified:Apr 15, 2026
    EPS:Aug 11, 2025
    EPSS Score:0.00067
    CVSS Score:9.8

    Affected Products

    Vendor
    Abb
    Product
    Aspect Enterprise
    Vendor
    Abb
    Product
    Matrix Series
    Vendor
    Abb
    Product
    Nexus Series

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-127 Directory Indexing
    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2025-7679 (CVSS 9.2) — The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT…
    CVE-2025-7677 (CVSS 8.2) — A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users.…
    CVE-2025-53191 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53190 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53189 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53188 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2024-13945 (CVSS 8.4) — Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credent…
    CVE-2024-51552 (CVSS 7.1) — Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issu…
    CVE-2024-13958 (CVSS 4.6) — Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedTh…
    CVE-2024-13957 (CVSS 7) — SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromis…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High