What’s Vulnerable › Products
ABB NEXUS Series vulnerabilities
32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.
Check whether your ABB NEXUS Series version is affected
Latest ABB NEXUS Series vulnerabilities
- CVE-2024-13945 — Stored Absolute Path Traversal (CVSS 6.0)
- CVE-2024-51553 — Predictable Filename (CVSS 6.5)
- CVE-2024-51552 — Weak Password Storage (CVSS 6.0)
- CVE-2024-48848 — LARGECONTENT - device disk overutilization (CVSS 6.5)
- CVE-2024-13958 — Stored Cross Site Scripting (CVSS 4.8)
- CVE-2024-13957 — SSRF Server Side Request Forgery (CVSS 7.6)
- CVE-2024-13956 — SSL Verification Bypass (CVSS 6.7)
- CVE-2024-13955 — SQL Injection 2nd Order (CVSS 8.8)
- CVE-2024-13954 — Serialization / Deserialization of configuration data (CVSS 6.5)
- CVE-2024-13953 — Sensitive Information disclosed in log files (CVSS 4.9)
- CVE-2024-13952 — Remote Code Execution (CVSS 8.4)
- CVE-2024-13951 — One way hash with predictable salt (CVSS 7.6)
- CVE-2024-13950 — Log Injection (CVSS 6.8)
- CVE-2024-13949 — Log Forging (CVSS 6.8)
- CVE-2024-13948 — Insecure Permissions (CVSS 7.3)
- CVE-2024-13947 — External System or Configuration Control (CVSS 6.0)
- CVE-2024-13946 — Binary Planting / LoadLibrary DLL's not Signed (CVSS 6.8)
- CVE-2025-30173 — Admin Authorized File Upload (CVSS 6.7)
- CVE-2025-30172 — Admin Authorized Remote Code Execution (CVSS 8.0)
- CVE-2025-30171 — Admin Authorized System File Deletion (CVSS 9.0)
- CVE-2025-30170 — Admin Authorized Exposure of file path, file size or file existence (CVSS 5.5)
- CVE-2025-30169 — Admin Authorized File Upload and Execute PHP (CVSS 6.7)
- CVE-2025-2410 — Admin Authorized Port (iptables) manipulation (open/close/disable ports) (CVSS 9.1)
- CVE-2025-2409 — Admin Authorized System File corruption (CVSS 9.1)
- CVE-2024-9639 — Authenticated Remote Code Execution (CVSS 8.0)