Lucene search

K
cvelistABBCVELIST:CVE-2024-4007
HistoryJul 01, 2024 - 12:06 p.m.

CVE-2024-4007 Hard coded default credential contained in install package

2024-07-0112:06:53
CWE-1392
ABB
www.cve.org
5
cve-2024-4007
hard coded credential
install package
abb aspect
nexus series
matrix series
wrong configuration

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:U/V:D/RE:L

0.0004 Low

EPSS

Percentile

9.2%

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

CNA Affected

[
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/aspect-enterprise",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "ASPECT Enterprise (ASP-ENT-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  },
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/nexus-series",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "NEXUS Series (NEX-2x, NEXUS-3-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  },
  {
    "collectionURL": "https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/matrix",
    "defaultStatus": "unaffected",
    "packageName": "Installer",
    "platforms": [
      "Linux"
    ],
    "product": "MATRIX Series(MAT-x)",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "3.07"
      }
    ]
  }
]

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

CVSS4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:U/V:D/RE:L

0.0004 Low

EPSS

Percentile

9.2%

Related for CVELIST:CVE-2024-4007