CVEvulnerability

CVE-2023-0635

9.8 CRITICAL Published 2023-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1391

Description

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01.

Affected configurations

• abb aspect-ent-2 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-12 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-256 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-96 firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128 firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-a firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-g firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-f firmware (>= 3.0.0 < 3.07.01) • abb nexus-3-2128 firmware (>= 3.0.0 < 3.07.01) • abb nexus-3-264 firmware (>= 3.0.0 < 3.07.01) • abb nexus-264 firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-a firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-g firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-f firmware (>= 3.0.0 < 3.07.01) • abb matrix-216 firmware (>= 3.0.0 < 3.07.01) • abb matrix-232 firmware (>= 3.0.0 < 3.07.01) • abb matrix-296 firmware (>= 3.0.0 < 3.07.01) • abb matrix-264 firmware (>= 3.0.0 < 3.07.01) • abb matrix-11 firmware (>= 3.0.0 < 3.07.01)

Related

Weakness · CWE (1)

  • CWE-1391 Use of Weak Credentials weakness

References