ABB Devices Vulnerability: Hard-Coded Credentials Comedy of Errors – CVSS 9.3
Warning: The ABB ASPECT-Enterprise, NEXUS, and MATRIX series are vulnerable to remote exploitation due to hard-coded credentials. With a CVSS score of 9.3, it’s a hacker’s dream. So, unless you want unauthorized access to your devices, it’s time to update that firmware and secure your network! View CSAF for more details.
Hot Take:
Looks like ABB’s ASPECT, NEXUS, and MATRIX series have been sharing some secrets they shouldn’t have—hard-coded credentials! Time to give these devices a stern talking-to about the dangers of online oversharing. Maybe they need some good old-fashioned parental controls or at least a decent password manager. ABB, keep your secrets safe, okay?
Key Points:
- ABB’s ASPECT-Enterprise, NEXUS, and MATRIX series vulnerable due to hard-coded credentials.
- Successful exploitation could allow unauthorized access to devices.
- Vulnerability CVE-2024-51547 assigned, with a CVSS v3 score of 9.8 and v4 score of 9.3.
- Gjoko Krstikj of Zero Science Lab reported the vulnerability.
- ABB and CISA recommend mitigation strategies including disconnecting vulnerable devices from the internet and using secure remote access methods.
Already a member? Log in here