CVE-2024-48845
CRITICALDescription
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
Is your site exposed to CVE-2024-48845?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-2 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-96_firmware |
| abb | aspect-ent-96 |
| abb | nexus-2128_firmware |
| abb | nexus-2128 |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-g_firmware |
| abb | nexus-2128-g |
| abb | nexus-264_firmware |
| abb | nexus-264 |
| abb | nexus-264-a_firmware |
| abb | nexus-264-a |
| abb | nexus-264-g_firmware |
| abb | nexus-264-g |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-2128 |
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | nexus-264-f_firmware |
| abb | nexus-264-f |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-48845? +
How severe is CVE-2024-48845? +
What products are affected by CVE-2024-48845? +
How do I check if I'm vulnerable to CVE-2024-48845? +
Related Vulnerabilities
Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After …
No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console …
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through …
KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any …
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain …
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007.