CVEvulnerability

CVE-2023-0636

9.8 CRITICAL Published 2023-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.

Affected configurations

• abb aspect-ent-2 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-12 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-256 firmware (>= 3.0.0 < 3.07.01) • abb aspect-ent-96 firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128 firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-a firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-g firmware (>= 3.0.0 < 3.07.01) • abb nexus-2128-f firmware (>= 3.0.0 < 3.07.01) • abb nexus-3-2128 firmware (>= 3.0.0 < 3.07.01) • abb nexus-3-264 firmware (>= 3.0.0 < 3.07.01) • abb nexus-264 firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-a firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-g firmware (>= 3.0.0 < 3.07.01) • abb nexus-264-f firmware (>= 3.0.0 < 3.07.01) • abb matrix-216 firmware (>= 3.0.0 < 3.07.01) • abb matrix-232 firmware (>= 3.0.0 < 3.07.01) • abb matrix-296 firmware (>= 3.0.0 < 3.07.01) • abb matrix-264 firmware (>= 3.0.0 < 3.07.01) • abb matrix-11 firmware (>= 3.0.0 < 3.07.01)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References