CVE-2024-51551CWE-1287

Default Credentials

Critical · published December 5, 2024

CVSS v4.0
9.3
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

🚨 Default credentials still in play! The ASPECT product on Linux can be accessed using widely known defaults, making it a prime target for attackers. 🔥 Think of it like leaving the front door to your business wide open because you never changed the combination on your lock — any uninvited guest can stroll right in! An attacker could easily gain access to sensitive systems, potentially compromising critical operations and data. This could lead to unauthorized modifications, data breaches, or even system takeovers—absolutely devastating for any organization relying on this software!

Put simply

Think of it like leaving the front door to your business wide open because you never changed the combination on your lock — any uninvited guest can stroll right in! This vulnerability allows unauthorized access to ABB ASPECT and related products due to default credentials that have not been changed, enabling attackers to exploit the system without any authentication hurdles.

What to do

An attacker could easily gain access to sensitive systems, potentially compromising critical operations and data. This could lead to unauthorized modifications, data breaches, or even system takeovers—absolutely devastating for any organization relying on this software! Immediately change the default credentials to secure ones on the affected versions: ABB ASPECT - Enterprise v3.07.02, NEXUS Series v3.07.02, and MATRIX Series v3.07.02. Conduct a security audit to ensure no accounts are using default credentials and enable two-factor authentication where possible. Patch any vulnerable installations promptly! You've got this! Follow these steps to fortify your defenses and secure your systems. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.00446 · 37.8th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2024-12-05T12:57Z
EPSS history
Timeline
  • 05 DEC 12:57Z
    Default Credentials
    cvelistv5