What’s Vulnerable › Vulnerabilities
CVE-2024-48847: MD5 bypass operation
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-05 · updated 2026-06-17
- Weakness: CWE-328
Description
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01
Affected products
- ABB Aspect-Ent-12 Firmware: through 3.08.01
- ABB Aspect-Ent-256 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Aspect-Ent-2 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Aspect-Ent-96 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Matrix-11 Firmware: through 3.08.01
- ABB Matrix-216 Firmware: through 3.08.01
- ABB Matrix-232 Firmware: through 3.08.01
- ABB Matrix-264 Firmware: through 3.08.01
- ABB Matrix-296 Firmware: through 3.08.01
- ABB Nexus-2128-A Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-2128-F Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-2128-G Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-2128 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-264-A Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-264-F Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-264-G Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-264 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-3-2128 Firmware: before 3.08.03 — fixed in 3.08.03
- ABB Nexus-3-264 Firmware: through 3.08.01
How to fix
Upgrade to a fixed version: ABB Aspect-Ent-256 Firmware 3.08.03; ABB Aspect-Ent-2 Firmware 3.08.03; ABB Aspect-Ent-96 Firmware 3.08.03; ABB Nexus-2128-A Firmware 3.08.03; ABB Nexus-2128-F Firmware 3.08.03; ABB Nexus-2128-G Firmware 3.08.03; ABB Nexus-2128 Firmware 3.08.03; ABB Nexus-264-A Firmware 3.08.03; ABB Nexus-264-F Firmware 3.08.03; ABB Nexus-264-G Firmware 3.08.03; ABB Nexus-264 Firmware 3.08.03; ABB Nexus-3-2128 Firmware 3.08.03. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-48847 or the next vulnerability affects your stack