What’s Vulnerable › Vulnerabilities

CVE-2024-48845: Weak Password Rules/Strength

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-12-05 · updated 2026-06-17
• Weakness: CWE-521

Description

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Affected products

• ABB Aspect-Ent-12 Firmware: through 3.07.02
• ABB Aspect-Ent-256 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Aspect-Ent-2 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Aspect-Ent-96 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-11 Firmware: through 3.07.02
• ABB Matrix-216 Firmware: through 3.07.02
• ABB Matrix-232 Firmware: through 3.07.02
• ABB Matrix-264 Firmware: through 3.07.02
• ABB Matrix-296 Firmware: through 3.07.02
• ABB Nexus-2128-A Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128-F Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128-G Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-A Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-F Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-G Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-3-2128 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-3-264 Firmware: through 3.07.02

How to fix

Upgrade to a fixed version: ABB Aspect-Ent-256 Firmware 3.08.03; ABB Aspect-Ent-2 Firmware 3.08.03; ABB Aspect-Ent-96 Firmware 3.08.03; ABB Nexus-2128-A Firmware 3.08.03; ABB Nexus-2128-F Firmware 3.08.03; ABB Nexus-2128-G Firmware 3.08.03; ABB Nexus-2128 Firmware 3.08.03; ABB Nexus-264-A Firmware 3.08.03; ABB Nexus-264-F Firmware 3.08.03; ABB Nexus-264-G Firmware 3.08.03; ABB Nexus-264 Firmware 3.08.03; ABB Nexus-3-2128 Firmware 3.08.03. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2024-48845 or the next vulnerability affects your stack