CVE-2024-51547CWE-798

Credentials Disclosure - keys

Critical · published February 6, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

🚨 Hard-coded credentials are sneaking their way into ABB software! We're talking full access with just the right username and password combination—yikes! 🔥 This is like leaving a spare key under the welcome mat, making it all too easy for someone to waltz right in without knocking. Your sensitive data is out in the open like a treasure chest without a lock! An attacker could gain unauthorized access to your ABB systems, leading to potentially devastating consequences like data breaches or even tampering with critical processes. The implications could shake your entire operation to its core, making this a vulnerability you can't afford to ignore.

Put simply

This is like leaving a spare key under the welcome mat, making it all too easy for someone to waltz right in without knocking. Your sensitive data is out in the open like a treasure chest without a lock! This vulnerability allows attackers to exploit hard-coded credentials within the ABB ASPECT-Enterprise, NEXUS Series, and MATRIX Series, affecting all versions through 3.*, giving them remote control with minimal effort.

What to do

An attacker could gain unauthorized access to your ABB systems, leading to potentially devastating consequences like data breaches or even tampering with critical processes. The implications could shake your entire operation to its core, making this a vulnerability you can't afford to ignore. Immediate action is required! Remove or change the hard-coded credentials in your software to secure access. Also, update to the latest version of the affected components as soon as possible to patch this critical flaw. This is fixable! Act now and you’ll have those digital doors locked tight in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00618 · 48.9th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-02-06T04:12Z
EPSS history
Timeline
  • 06 FEB 04:12Z
    Credentials Disclosure - keys
    cvelistv5