CVE-2024-51545
CRITICALDescription
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Is your site exposed to CVE-2024-51545?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | aspect-ent-2 |
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-96 |
| abb | aspect-ent-96_firmware |
| abb | nexus-2128 |
| abb | nexus-2128_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-g |
| abb | nexus-2128-g_firmware |
| abb | nexus-264 |
| abb | nexus-264_firmware |
| abb | nexus-264-a |
| abb | nexus-264-a_firmware |
| abb | nexus-264-f |
| abb | nexus-264-f_firmware |
| abb | nexus-264-g |
| abb | nexus-264-g_firmware |
| abb | nexus-3-2128 |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-51545? +
How severe is CVE-2024-51545? +
What products are affected by CVE-2024-51545? +
How do I check if I'm vulnerable to CVE-2024-51545? +
Related Vulnerabilities
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials …
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes …
StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token …
LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect …
Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability …
Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges …