CVE-2024-51550
CRITICALDescription
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| abb | aspect-ent-12_firmware |
| abb | aspect-ent-12 |
| abb | aspect-ent-2 |
| abb | aspect-ent-2_firmware |
| abb | aspect-ent-256 |
| abb | aspect-ent-256_firmware |
| abb | aspect-ent-96 |
| abb | aspect-ent-96_firmware |
| abb | nexus-2128 |
| abb | nexus-2128_firmware |
| abb | nexus-2128-a |
| abb | nexus-2128-a_firmware |
| abb | nexus-2128-f |
| abb | nexus-2128-f_firmware |
| abb | nexus-2128-g |
| abb | nexus-2128-g_firmware |
| abb | nexus-264 |
| abb | nexus-264_firmware |
| abb | nexus-264-a |
| abb | nexus-264-a_firmware |
| abb | nexus-264-f |
| abb | nexus-264-f_firmware |
| abb | nexus-264-g |
| abb | nexus-264-g_firmware |
| abb | nexus-3-2128 |
| abb | nexus-3-2128_firmware |
| abb | nexus-3-264_firmware |
| abb | nexus-3-264 |
| abb | matrix-11_firmware |
| abb | matrix-11 |
| abb | matrix-216_firmware |
| abb | matrix-216 |
| abb | matrix-232_firmware |
| abb | matrix-232 |
| abb | matrix-264_firmware |
| abb | matrix-264 |
| abb | matrix-296_firmware |
| abb | matrix-296 |
References
Frequently Asked Questions
What is CVE-2024-51550? +
How severe is CVE-2024-51550? +
What products are affected by CVE-2024-51550? +
How do I check if I'm vulnerable to CVE-2024-51550? +
Related Vulnerabilities
Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection. A bad actor …
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the …
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the …
Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in …
For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 (suspended, banned, terminated …
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows …