CVE-2025-2410

Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Scoring

Severity

HIGH

CVSS base score

9.1

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:C

EPSS probability

0.49%

CWE

CWE-99

Published

2025-05-22

Last modified

2026-03-12

Affected products

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• ABB MATRIX Series

Weakness type

• CWE-99

Related vulnerabilities

• CVE-2026-81524 — Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver
• CVE-2026-81521 — Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver
• CVE-2026-62910 — Microsoft Exchange Server Elevation of Privilege Vulnerability
• CVE-2026-15186 — macrozheng mall Portal Endpoint create resource injection
• CVE-2026-13493 — AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection
• CVE-2026-12207 — medkey-org medkey HTTP REST API PatientController.php actionGetPatientById resource injection
• CVE-2026-10624 — SourceCodester Human Resource Management Employee View detailview.php resource injection
• CVE-2026-10299 — code-projects Online Hospital Management System viewdoctortimings.php resource injection

Markdown version · Browse all CVEs