CVE-2024-51546

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.  Affected products:

ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-1287CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-515479.8Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-EnterpriCVE-2024-515488.8Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS SeriCVE-2024-515499.4Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products: ABB ASPECT - EnterprCVE-2024-51556.1The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whCVE-2024-515509.8Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.  ACVE-2024-5155110.0Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected pCVE-2024-515526.0Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: tCVE-2024-515536.5Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become CVE-2024-515549.8Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected pCVE-2024-5155510.0Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not CVE-2024-515566.5This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated reCVE-2024-515576.5This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker
CVE-2024-51546: High severity, CVSS 7.5 | Vulnix