CVE-2024-51545

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Scoring

Severity

CRITICAL

CVSS base score

10

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

EPSS probability

0.42%

CWE

CWE-522

Published

2024-12-05

Last modified

2026-03-13

Affected products

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• ABB MATRIX Series

Weakness type

• CWE-522

Related vulnerabilities

• CVE-2026-69805 — .NET Elevation of Privilege Vulnerability
• CVE-2026-64918 — Microsoft Office Spoofing Vulnerability
• CVE-2026-81381 — GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
• CVE-2026-77909 — Azure CycleCloud Information Disclosure Vulnerability
• CVE-2026-82070 — Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface
• CVE-2026-86600 — Workload identity attestation generated before login host validation in Snowflake drivers
• CVE-2026-86726 — AVideo through 29.0 Information Disclosure via restreamsActive.json.php
• CVE-2026-61516 — Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Markdown version · Browse all CVEs