Matrix 216
Vendor:
First CVE: Jun 5, 2023 · Active for 3 years
29
Total CVEs
More Total CVEs than 96% of tracked products
9.7
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
8.7
Avg CVSS
Higher Avg CVSS than 78% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Matrix 216 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 5, 2023
3 years ago
Most Recent CVE
Feb 6, 2025
533 days ago
CVE Severity & Scoring
Matrix 21629 CVEs
41%
52%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network28 (96.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (3.4%)
Attack Complexity
Low29 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None27 (93.1%)
Unknown0 (0.0%)
Required2 (6.9%)
Privileges Required
Low5 (17.2%)
High0 (0.0%)
None24 (82.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (29 CVEs).
29 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-6298CRITICAL Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to execute arbitrary code remotely | Jul 5, 2024 | 9.8 | 53 | NO | YES |
CVE-2024-6209HIGH Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series
v3.08.01
; MATRIX Series
v3.08.01 allows Attacker to access files unauthorized | Jul 5, 2024 | 7.5 | 43 | NO | YES |
CVE-2024-51550CRITICAL Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.
Affected products:
ABB ASPECT - Enterpr | Dec 5, 2024 | 9.8 | 37 | NO | YES |
CVE-2024-48845CRITICAL Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access.
Affec | Dec 5, 2024 | 9.8 | 36 | NO | YES |
CVE-2024-48840CRITICAL Unauthorized Access vulnerabilities allow Remote Code Execution.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | Dec 5, 2024 | 9.8 | 36 | NO | YES |
CVE-2024-48839CRITICAL Improper Input Validation vulnerability allows Remote Code Execution.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 | Dec 5, 2024 | 9.8 | 36 | NO | YES |
CVE-2024-4007HIGH Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured. | Jul 1, 2024 | 8.8 | 36 | NO | YES |
CVE-2024-51546HIGH Credentials Disclosure vulnerabilities allow access to on board project back-up bundles.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Ser | Dec 5, 2024 | 7.5 | 31 | NO | YES |
CVE-2023-0635CRITICAL Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules) | Jun 5, 2023 | 9.8 | 31 | NO | NO |
CVE-2024-6516MEDIUM Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.
Affected products:
ABB ASPECT - Enterprise v3. | Dec 5, 2024 | 6.1 | 30 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (29 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
11 CVEs
37.9% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (29 CVEs).
Media Mentions
Signals from CVEs in this product scope (29 CVEs).
Top CNAs Publishing CVEs For Matrix 216
Top CWEs
Versions
No cataloged versions.