What’s Vulnerable › Vulnerabilities

CVE-2024-48846: Cross Side Request Forgery, CSRF

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-12-05 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

• ABB Aspect-Ent-12 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Aspect-Ent-256 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Aspect-Ent-2 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Aspect-Ent-96 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-11 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-216 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-232 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-264 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Matrix-296 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128-A Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128-F Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128-G Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-2128 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-A Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-F Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264-G Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-264 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-3-2128 Firmware: before 3.08.03 — fixed in 3.08.03
• ABB Nexus-3-264 Firmware: before 3.08.03 — fixed in 3.08.03

How to fix

Upgrade to a fixed version: ABB Aspect-Ent-12 Firmware 3.08.03; ABB Aspect-Ent-256 Firmware 3.08.03; ABB Aspect-Ent-2 Firmware 3.08.03; ABB Aspect-Ent-96 Firmware 3.08.03; ABB Matrix-11 Firmware 3.08.03; ABB Matrix-216 Firmware 3.08.03; ABB Matrix-232 Firmware 3.08.03; ABB Matrix-264 Firmware 3.08.03; ABB Matrix-296 Firmware 3.08.03; ABB Nexus-2128-A Firmware 3.08.03; ABB Nexus-2128-F Firmware 3.08.03; ABB Nexus-2128-G Firmware 3.08.03. Check the vendor advisory for mitigations.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2024-48846 or the next vulnerability affects your stack