CVE-2024-48839
Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
- Affected products
- Abb Aspect, Matrix Series, Nexus Series
- Abb aspect-ent-2 Firmware
- < 3.08.03
- Fix
- Available
- CVSS 3.1
- 10.0 CRITICAL
- EPSS
- 2.8% (86th percentile)
- Weakness
- CWE-94
- NVD status
- Analyzed
- Published
- 2024-12-05
CVE-2024-48839 at NVD
10 known exploits for CVE-2024-48839
Proof-of-concept code and exploit modules indexed by Sploitus
ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
ABB Cylon Aspect 3.08.02 bbmdUpdate.php Remote Code Execution Vulnerability
ABB Cylon Aspect 3.08.02 uploadDb.php Remote Code Execution Vulnerability
ABB Cylon Aspect 3.08.02 (uploadDb.php) Remote Code Execution
ABB Cylon Aspect 3.08.02 (syslogUpdate.php) Remote Code Execution
ABB Cylon Aspect 3.08.02 (fileSystemUpdate.php) Remote Guest2Root Exploit
ABB Cylon Aspect 3.08.02 (fileSystemUpdateExecute.php) Remote Code Execution
ABB Cylon Aspect 3.08.02 (servicesUpdate.php) Remote Code Execution
ABB Cylon Aspect 3.08.01 (servicesUpdate.php) Remote Code Execution