CVE-2024-48847 describes a critical MD5 Checksum Bypass vulnerability affecting ABB ASPECT, NEXUS Series, and MATRIX Series products, all at version 3.08.01. This flaw exploits weaknesses in MD5 hash calculation or validation, allowing attackers to bypass integrity checks. With a CVSS score of 9.1 (Critical), it presents a low-complexity, unauthenticated network attack vector that could lead to high confidentiality and integrity impacts. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.08.03CPE matchmatch criteria | cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:* | ||
< 3.08.03CPE matchmatch criteria | cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:* | ||
< 3.08.03CPE matchmatch criteria | cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:* | ||
< 3.08.03CPE matchmatch criteria | cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:* | ||
< 3.08.03CPE matchmatch criteria | cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.