What’s Vulnerable › Products

ABB Nexus-2128 Firmware vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 24 published in the last 12 months.

Check whether your ABB Nexus-2128 Firmware version is affected

Latest ABB Nexus-2128 Firmware vulnerabilities

• CVE-2024-51547 — Credentials Disclosure - keys (CVSS 9.8)
• CVE-2024-6784 — SSRF Server Side Request Forgery (CVSS 9.9)
• CVE-2024-6516 — Cross Site Scripting XSS (CVSS 6.1)
• CVE-2024-6515 — unauthorized file access (CVSS 8.1)
• CVE-2024-51554 — off-by-one-error (CVSS 9.8)
• CVE-2024-51551 — Default Credentials (CVSS 10.0)
• CVE-2024-51550 — Data Validation / Sanitization (CVSS 9.8)
• CVE-2024-51549 — Absolute Path Traversal (CVSS 9.4)
• CVE-2024-51548 — Dangerous File Upload (CVSS 8.8)
• CVE-2024-51546 — Credentails Disclosure (CVSS 7.5)
• CVE-2024-51545 — Username Enumeration (CVSS 9.8)
• CVE-2024-51544 — Service Control (CVSS 8.2)
• CVE-2024-51543 — Information Disclosure (CVSS 7.5)
• CVE-2024-51542 — Configuration Download (CVSS 8.2)
• CVE-2024-51541 — Local File Inclusion (CVSS 7.5)
• CVE-2024-48847 — MD5 bypass operation (CVSS 9.1)
• CVE-2024-48846 — Cross Side Request Forgery, CSRF (CVSS 7.3)
• CVE-2024-48845 — Weak Password Rules/Strength (CVSS 9.8)
• CVE-2024-48844 — Denial of Service, DoS (CVSS 6.5)
• CVE-2024-48843 — Denial of Service, DoS (CVSS 7.5)
• CVE-2024-48840 — Unauthorized Access (CVSS 9.8)
• CVE-2024-48839 — Remote Code Execution, RCE (CVSS 9.8)
• CVE-2024-11317 — PHP Session Fixation (CVSS 10.0)
• CVE-2024-11316 — Filesize Check (CVSS 7.5)
• CVE-2024-6298 — remote code execution (CVSS 9.8)