CVE-2024-51550criticalCWE-1287

CVE-2024-51550: critical vulnerability in ABB NEXUS Series

Data Validation / Sanitization

Published

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.3epss 1.8%
from disclosure to weapon131 days
Published on NVDDec 5
1st PoC+131d
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
In short

A vulnerability in ABB ASPECT and related systems allows attackers to inject malicious data into Aspect devices because the system doesn't properly check or clean incoming data. This can lead to unauthorized control or damage to industrial equipment.

Technical detail

CWE-1287 data validation/sanitization flaw enables injection attacks against ABB ASPECT Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. Unvalidated input is processed directly on Aspect devices without sanitization, allowing attackers to inject arbitrary data with potential remote execution or system compromise depending on downstream processing.

Summary generated and translated by AI from the official description.
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L
Affected products
ABB · ASPECT-EnterpriseABB · MATRIX SeriesABB · NEXUS Series
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/52217unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ABB NEXUS Series

In the same product, most dangerous first.

CVE-2024-6298CRITICALremote code executionEPSS 19.0%CVE-2024-6209CRITICALunauthorized file accessEPSS 17.2%CVE-2024-51544HIGHService ControlEPSS 13.2%CVE-2024-48839CRITICALRemote Code Execution, RCEEPSS 2.8%CVE-2024-48840CRITICALUnauthorized AccessEPSS 2.1%CVE-2024-48845CRITICALWeak Password Rules/StrengthEPSS 1.8%
References
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch