CVE-2025-30170

Summary

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected Software

VendorProductVersion RangeStatus
ABBASPECT-Enterprise0 <= 3.08.03affected
ABBNEXUS Series0 <= 3.08.03affected
ABBMATRIX Series0 <= 3.08.03affected

Weaknesses

  • CWE-497: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References