CVE-2024-51552

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-257

Affected software

No affected versions have been published.

Timeline

Published
May 22, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-515536.5Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become CVE-2024-515549.8Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.  Affected pCVE-2024-5155510.0Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not CVE-2024-515566.5This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated reCVE-2024-515576.5This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker CVE-2024-515589.8This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. ACVE-2024-515596.5This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker coCVE-2024-51566.4The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and incluCVE-2024-515604.3This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated reCVE-2024-515617.5This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remoCVE-2024-515626.5The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value.CVE-2024-515636.5The virtio_vq_recordon function is subject to a time-of-check to time-of-use (TOCTOU) race condition.