What’s Vulnerable › Vulnerabilities

CVE-2024-51551: Default Credentials

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-05 · updated 2026-06-17
• Weakness: CWE-1287

Description

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Affected products

• ABB Aspect-Ent-12 Firmware: through 3.07.02
• ABB Aspect-Ent-256 Firmware: through 3.07.02
• ABB Aspect-Ent-2 Firmware: through 3.07.02
• ABB Aspect-Ent-96 Firmware: through 3.07.02
• ABB Matrix-11 Firmware: through 3.07.02
• ABB Matrix-216 Firmware: through 3.07.02
• ABB Matrix-232 Firmware: through 3.07.02
• ABB Matrix-264 Firmware: through 3.07.02
• ABB Matrix-296 Firmware: through 3.07.02
• ABB Nexus-2128-A Firmware: through 3.07.02
• ABB Nexus-2128-F Firmware: through 3.07.02
• ABB Nexus-2128-G Firmware: through 3.07.02
• ABB Nexus-2128 Firmware: through 3.07.02
• ABB Nexus-264-A Firmware: through 3.07.02
• ABB Nexus-264-F Firmware: through 3.07.02
• ABB Nexus-264-G Firmware: through 3.07.02
• ABB Nexus-264 Firmware: through 3.07.02
• ABB Nexus-3-2128 Firmware: through 3.07.02
• ABB Nexus-3-264 Firmware: through 3.07.02

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2024-51551 or the next vulnerability affects your stack