CVE-2024-51548
Dangerous File Upload
Severity Score
8.7
*CVSS v4
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Dangerous File Upload vulnerabilities allow upload of malicious scripts.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02
*Credits:
ABB likes to thank Gjoko Krstikj, Zero Science Lab, for reporting the vulnerabilities in responsible disclosure
CVSS Scores
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
System
Vulnerable | Subsequent
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-10-29 CVE Reserved
- 2024-12-05 CVE Published
- 2024-12-05 CVE Updated
- 2024-12-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| ABB Search vendor "ABB" | ASPECT-Enterprise Search vendor "ABB" for product "ASPECT-Enterprise" | <= 3.08.02 Search vendor "ABB" for product "ASPECT-Enterprise" and version " <= 3.08.02" | en |
Affected
| ||||||
| ABB Search vendor "ABB" | NEXUS Series Search vendor "ABB" for product "NEXUS Series" | <= 3.08.02 Search vendor "ABB" for product "NEXUS Series" and version " <= 3.08.02" | en |
Affected
| ||||||
| ABB Search vendor "ABB" | MATRIX Series Search vendor "ABB" for product "MATRIX Series" | <= 3.08.02 Search vendor "ABB" for product "MATRIX Series" and version " <= 3.08.02" | en |
Affected
| ||||||