Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
History

Thu, 05 Dec 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Abb
Abb aspect Enterprise
Abb matrix Series
Abb nexus Series
CPEs cpe:2.3:a:abb:aspect_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:matrix_series:*:*:*:*:*:*:*:*
cpe:2.3:a:abb:nexus_series:*:*:*:*:*:*:*:*
Vendors & Products Abb
Abb aspect Enterprise
Abb matrix Series
Abb nexus Series
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 05 Dec 2024 13:00:00 +0000

Type Values Removed Values Added
Description Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Title Cross Side Request Forgery, CSRF
Weaknesses CWE-352
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: ABB

Published: 2024-12-05T12:43:20.544Z

Updated: 2024-12-05T18:48:59.598Z

Reserved: 2024-10-08T17:24:01.445Z

Link: CVE-2024-48846

cve-icon Vulnrichment

Updated: 2024-12-05T15:54:44.402Z

cve-icon NVD

Status : Received

Published: 2024-12-05T13:15:06.983

Modified: 2024-12-05T13:15:06.983

Link: CVE-2024-48846

cve-icon Redhat

No data.