CVE-2024-4007 HIGH

CVE-2024-4007: Hard coded default credential contained in install package

Vendor Abb
Product ASPECT Enterprise (ASP-ENT-x)
Weakness CWE-1392
Published July 1, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:L/U:Red

What the vulnerability does

01Description

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

Key dates

02Disclosure timeline

July 1, 2024 CVE published
August 1, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF CVE-2018-25147 Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass CVE-2025-12217 SNMP Default Community String (public) CVE-2026-42072 Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access