CVE-2024-48847
HIGHDescription
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01
Is your site exposed to CVE-2024-48847?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-2 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-96_firmware |
| abb | aspect-ent-96 |
| abb | nexus-2128_firmware |
| abb | nexus-2128 |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-g_firmware |
| abb | nexus-2128-g |
| abb | nexus-264_firmware |
| abb | nexus-264 |
| abb | nexus-264-a_firmware |
| abb | nexus-264-a |
| abb | nexus-264-g_firmware |
| abb | nexus-264-g |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-2128 |
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | nexus-264-f_firmware |
| abb | nexus-264-f |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-48847? +
How severe is CVE-2024-48847? +
What products are affected by CVE-2024-48847? +
How do I check if I'm vulnerable to CVE-2024-48847? +
Related Vulnerabilities
### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of …
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically …
free-one-api allows users to access large language model reverse engineering libraries through the standard OpenAI API format. In versions up …
Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically …
R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to …
LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause …