First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-51542

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Configuration Download vulnerabilities allow access to dependency configuration information. Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
ABB	ASPECT-Enterprise	<= 3.08.02
ABB	NEXUS Series	<= 3.08.02
ABB	MATRIX Series	<= 3.08.02
abb	aspect_enterprise	<= 3.08.02
abb	nexus_series	<= 3.08.02
abb	matrix_series	<= 3.08.02

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory

Timeline

Published: Dec 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-515437.5Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise CVE-2024-515448.2Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - E CVE-2024-515459.8Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: CVE-2024-515467.5Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08 CVE-2024-515479.8Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterpri CVE-2024-515488.8Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Seri CVE-2024-515499.4Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterpr CVE-2024-51556.1The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, wh CVE-2024-515509.8Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. A CVE-2024-5155110.0Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected p CVE-2024-515526.0Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: t CVE-2024-515536.5Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become

CVE-2024-51542: High severity, CVSS 8.2 | Vulnix