CVE-2024-13947CWE-863

External System or Configuration Control

High · published May 22, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-05-22T18:13Z
EPSS history
Timeline
  • 22 MAY 18:13Z
    External System or Configuration Control
    cvelistv5