CVE-2023-0635
Description
Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01.
How to fix
- abb aspect-ent-2_firmware3.07.01 or later
- abb aspect-ent-12_firmware3.07.01 or later
- abb aspect-ent-256_firmware3.07.01 or later
- abb aspect-ent-96_firmware3.07.01 or later
- abb nexus-2128_firmware3.07.01 or later
- abb nexus-2128-a_firmware3.07.01 or later
- abb nexus-2128-g_firmware3.07.01 or later
- abb nexus-2128-f_firmware3.07.01 or later
- abb nexus-3-2128_firmware3.07.01 or later
- abb nexus-3-264_firmware3.07.01 or later
- abb nexus-264_firmware3.07.01 or later
- abb nexus-264-a_firmware3.07.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb aspect-ent-2_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb aspect-ent-12_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb aspect-ent-256_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb aspect-ent-96_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-2128_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-2128-a_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-2128-g_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-2128-f_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-3-2128_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-3-264_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-264_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-264-a_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-264-g_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb nexus-264-f_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb matrix-216_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb matrix-232_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb matrix-296_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb matrix-264_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
| abb matrix-11_firmware | 3.0.0 ≤ v < 3.07.01 | 3.07.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.