CVE-2024-6209

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized

Scoring

Severity

CRITICAL

CVSS base score

10

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:I/V:C/RE:H/U:Red

EPSS probability

17.16%

CWE

CWE-552

Published

2024-07-05

Last modified

2026-03-13

Affected products

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• ABB MATRIX Series

Weakness type

• CWE-552

Related vulnerabilities

• CVE-2023-50164 — Apache Struts: File upload component had a directory traversal vulnerability
• CVE-2024-6911 — Unauthenticated Local File Inclusion
• CVE-2025-34110 — ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
• CVE-2025-68109 — ChurchCRM vulnerable to RCE with database restore functionality
• CVE-2023-2766 — Weaver OA jx2_config.ini file access
• CVE-2009-10005 — ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode
• CVE-2023-48710 — iTop limit pages/exec.php script to PHP files
• CVE-2020-37082 — webERP 4.15.1 - Unauthenticated Backup File Access

Markdown version · Browse all CVEs