What’s Vulnerable › Vulnerabilities

CVE-2024-51547: Credentials Disclosure - keys

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-06 · updated 2026-06-17
• Weakness: CWE-798

Description

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected products

• ABB Aspect-Ent-12 Firmware: through 3.08.03
• ABB Aspect-Ent-256 Firmware: through 3.08.03
• ABB Aspect-Ent-2 Firmware: through 3.08.03
• ABB Aspect-Ent-96 Firmware: through 3.08.03
• ABB Matrix-11 Firmware: through 3.08.03
• ABB Matrix-216 Firmware: through 3.08.03
• ABB Matrix-232 Firmware: through 3.08.03
• ABB Matrix-264 Firmware: through 3.08.03
• ABB Matrix-296 Firmware: through 3.08.03
• ABB Nexus-2128-A Firmware: through 3.08.03
• ABB Nexus-2128-F Firmware: through 3.08.03
• ABB Nexus-2128-G Firmware: through 3.08.03
• ABB Nexus-2128 Firmware: through 3.08.03
• ABB Nexus-264-A Firmware: through 3.08.03
• ABB Nexus-264-F Firmware: through 3.08.03
• ABB Nexus-264-G Firmware: through 3.08.03
• ABB Nexus-264 Firmware: through 3.08.03
• ABB Nexus-3-2128 Firmware: through 3.08.03
• ABB Nexus-3-264 Firmware: through 3.08.03

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108470A6775&LanguageCode=en&DocumentPartId=pdf%20-%20Public%20Advisory&Action=Launch

Get alerted when CVE-2024-51547 or the next vulnerability affects your stack