2 lines
14 KiB
JSON
2 lines
14 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/aspect-enterprise","defaultStatus":"unaffected","packageName":"Installer","platforms":["Linux"],"product":"ASPECT Enterprise (ASP-ENT-x)","vendor":"ABB","versions":[{"status":"affected","version":"3.07"}]},{"collectionURL":"https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/nexus-series","defaultStatus":"unaffected","packageName":"Installer","platforms":["Linux"],"product":"NEXUS Series (NEX-2x, NEXUS-3-x)","vendor":"ABB","versions":[{"status":"affected","version":"3.07"}]},{"collectionURL":"https://new.abb.com/low-voltage/de/produkte/gebaeudeautomation/produktsortiment/cylon/produkte/matrix","defaultStatus":"unaffected","packageName":"Installer","platforms":["Linux"],"product":"MATRIX Series(MAT-x)","vendor":"ABB","versions":[{"status":"affected","version":"3.07"}]}],"source":"cybersecurity@ch.abb.com"},{"affectedData":[{"cpes":["cpe:2.3:o:abb:aspect-ent-2_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"aspect-ent-2_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:aspect-ent-96_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"aspect-ent-96_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-2128-a_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-2128-a_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-2128-f_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-2128-f_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-2128_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-2128_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-2128-g_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-2128-g_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-264-a_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-264-a_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-264-f_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-264-f_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-264_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-264_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-264-g_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"nexus-264-g_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-3-2128_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-3-2128_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:nexus-3-264_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nexus-3-264_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:matrix-11_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"matrix-11_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:matrix-216_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"matrix-216_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:matrix-232_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"matrix-232_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:matrix-264_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"matrix-264_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:aspect-ent-12_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"aspect-ent-12_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:aspect-ent-256_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"aspect-ent-256_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:abb:matrix-296_firmware:3.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"matrix-296_firmware","vendor":"abb","versions":[{"lessThan":"3.07.02","status":"affected","version":"3.0.0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E7160A7B-C86C-4B6F-9676-E609045DEB95","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:*","matchCriteriaId":"7D3FE8A0-B7B1-496F-918B-83AECEC80486","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"33FFD0D5-84E8-4565-8CCC-41EBD13C3B33","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:*","matchCriteriaId":"4C6351DE-8170-4023-B815-536030F9236E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"55BD3450-6363-493A-B927-D0B799B2E5A5","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:*","matchCriteriaId":"125AAF0E-3CB2-4F5A-BA04-742918422422","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D11512D2-4258-4187-B932-F0F2087B2655","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:*","matchCriteriaId":"9CC1901E-7476-4070-B649-E2EAE52A38A6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2500228A-DCF9-4D53-860D-33F8E3A7FE39","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:*","matchCriteriaId":"7CC44F95-4AE8-48B3-AC2C-6A4EB20F62DD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"07E65B3D-584F-4ECA-8C02-2B6BD776BA64","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:*","matchCriteriaId":"653A6815-9BC7-4BD4-BB67-DBCC666ED860","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B743E53A-C6B6-4458-A407-6C182E72147B","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:*","matchCriteriaId":"40C07D72-CA89-40A1-8EE8-F48A06DB7992","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4A7F70B4-F8D7-445A-9DD6-82D0F4F146FB","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:*","matchCriteriaId":"80E8A1A8-8476-4C36-A6F6-258C2DC60388","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"35AFA173-993C-4554-AE45-5978B047AE07","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:*","matchCriteriaId":"699E0759-590A-4362-9B5B-F876C1A020D1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8EC23B51-E42E-47E4-9419-7C18DA2E568E","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:*","matchCriteriaId":"697D73AC-8567-4D25-B42F-FB584DAFF05F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3EF3AC84-A778-4C20-BC7B-33E1338B9EAD","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:*","matchCriteriaId":"979B2BF4-885C-46B4-9093-E7CC35EBB397","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6CDA2D7A-A68A-4495-B522-108105980AA4","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:*","matchCriteriaId":"66A14E33-5416-45D9-BBE4-61EFEC246E20","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AB976E8E-A73C-4BC0-84C1-9ED555865C15","versionEndExcluding":"3.07.02","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:*","matchCriteriaId":"96BF51C6-E220-4347-9505-48DAE2BB26B7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured."},{"lang":"es","value":"Credencial predeterminada en el paquete de instalación en ABB ASPECT; NEXUS Series; MATRIX Series versión 3.07 permite a un atacante iniciar sesión en instancias de productos mal configuradas."}],"id":"CVE-2024-4007","lastModified":"2026-06-17T08:00:55.623","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"cybersecurity@ch.abb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"RED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Red","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"LOW"},"source":"cybersecurity@ch.abb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4007","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-07-02T19:33:48.062617Z","version":"2.0.3"}}]},"published":"2024-07-01T13:15:06.077","references":[{"source":"cybersecurity@ch.abb.com","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A6101&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@ch.abb.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-1392"}],"source":"cybersecurity@ch.abb.com","type":"Secondary"}]}
|