[{"vendor":"abb","product":"aspect_enterprise","defaultStatus":"unknown","cpes":["cpe:2.3:a:abb:aspect_enterprise:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"3.08.01","versionType":"custom","status":"affected"}]},{"vendor":"abb","product":"nexus_series","defaultStatus":"unknown","cpes":["cpe:2.3:a:abb:nexus_series:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"3.08.01","versionType":"custom","status":"affected"}]},{"vendor":"abb","product":"matrix_series","defaultStatus":"unknown","cpes":["cpe:2.3:a:abb:matrix_series:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"3.08.01","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-12-05T15:50:15.431101Z","id":"CVE-2024-48845","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"ABB","product":"ASPECT-Enterprise","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"0","lessThanOrEqual":"3.07.02","versionType":"custom","status":"affected"}]},{"vendor":"ABB","product":"NEXUS Series","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"0","lessThanOrEqual":"3.07.02","versionType":"custom","status":"affected"}]},{"vendor":"ABB","product":"MATRIX Series","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"0","lessThanOrEqual":"3.07.02","versionType":"custom","status":"affected"}]}]

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AND
     OR
          *cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03
     OR
          cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:* versions from (including) 3.07.02
     OR
          cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:*

AND
     OR
          cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:*
     OR
          *cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.08.03

Asea Brown Boveri Ltd. (ABB): https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch Types: Vendor Advisory

Weak Password  Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could  facilitate unauthorized admin/application access. 
Affected products:


ABB ASPECT - Enterprise v3.07.02; 
NEXUS Series v3.07.02; 
MATRIX Series v3.07.02

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CWE-521

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7497&LanguageCode=en&DocumentPartId=&Action=Launch