What’s Vulnerable › Vulnerabilities

CVE-2024-6298: remote code execution

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-05 · updated 2026-06-17
• Weakness: CWE-1287

Description

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

Affected products

• ABB Aspect-Ent-12 Firmware: through 3.08.01
• ABB Aspect-Ent-256 Firmware: through 3.08.01
• ABB Aspect-Ent-2 Firmware: through 3.08.01
• ABB Aspect-Ent-96 Firmware: through 3.08.01
• ABB Matrix-11 Firmware: through 3.08.01
• ABB Matrix-216 Firmware: through 3.08.01
• ABB Matrix-232 Firmware: through 3.08.01
• ABB Matrix-264 Firmware: through 3.08.01
• ABB Matrix-296 Firmware: through 3.08.01
• ABB Nexus-2128-A Firmware: through 3.08.01
• ABB Nexus-2128-F Firmware: through 3.08.01
• ABB Nexus-2128-G Firmware: through 3.08.01
• ABB Nexus-2128 Firmware: through 3.08.01
• ABB Nexus-264-A Firmware: through 3.08.01
• ABB Nexus-264-F Firmware: through 3.08.01
• ABB Nexus-264-G Firmware: through 3.08.01
• ABB Nexus-264 Firmware: through 3.08.01
• ABB Nexus-3-2128 Firmware: through 3.08.01
• ABB Nexus-3-264 Firmware: through 3.08.01

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.39956449.23035250.1719878527-141379670.1701144964

Get alerted when CVE-2024-6298 or the next vulnerability affects your stack