CVE-2024-51548
CRITICALDescription
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Is your site exposed to CVE-2024-51548?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | aspect-ent-2 |
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-96 |
| abb | aspect-ent-96_firmware |
| abb | nexus-2128 |
| abb | nexus-2128_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-g |
| abb | nexus-2128-g_firmware |
| abb | nexus-264 |
| abb | nexus-264_firmware |
| abb | nexus-264-a |
| abb | nexus-264-a_firmware |
| abb | nexus-264-f |
| abb | nexus-264-f_firmware |
| abb | nexus-264-g |
| abb | nexus-264-g_firmware |
| abb | nexus-3-2128 |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-51548? +
How severe is CVE-2024-51548? +
What products are affected by CVE-2024-51548? +
How do I check if I'm vulnerable to CVE-2024-51548? +
Related Vulnerabilities
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a …
The <redacted>.exe or <redacted>.exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any …
Emlog is an open source website building system. Prior to version 2.6.11, insecure plugin upload functionality allows attackers to upload …
Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading …
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. The application validates uploaded …
Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint that allows remote attackers to write …