CVE-2024-13949

Summary

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3.*.

Affected Software

VendorProductVersion RangeStatus
ABBASPECT-Enterprise0 <= 3.*affected
ABBNEXUS Series0 <= 3.*affected
ABBMATRIX Series0 <= 3.*affected

Weaknesses

  • CWE-117: CWE-117 Improper Output Neutralization for Logs

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References