CVE-2025-30169mediumCWE-434

CVE-2025-30169: falha de média gravidade em ABB ASPECT-Enterprise

Admin Authorized File Upload and Execute PHP

Publicada em

Seguir esta CVE+ Monitorar ASPECT-Enterprise+ Monitorar MATRIX Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6epss 0.4%
File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C
Produtos afetados
ABB · ASPECT-EnterpriseABB · MATRIX SeriesABB · NEXUS Series
CVEs relacionadas — ABB ASPECT-Enterprise

No mesmo produto, das mais perigosas para as menos.

CVE-2024-6298CRITICALremote code executionEPSS 19.0%CVE-2024-6209CRITICALunauthorized file accessEPSS 17.2%CVE-2024-51544HIGHService ControlEPSS 13.2%CVE-2024-48839CRITICALRemote Code Execution, RCEEPSS 2.8%CVE-2024-48840CRITICALUnauthorized AccessEPSS 2.1%CVE-2024-48845CRITICALWeak Password Rules/StrengthEPSS 1.8%