Known vulnerabilities in NEXUS-3

Vendor: ABB
Software: NEXUS-3
Software CPE: cpe:2.3:h:abb:nexus-3:*:*:*:*:*:*:*:*
Website: https://new.abb.com/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NEXUS-3 NEXUS-3 is affected by 20 known vulnerabilities: 10 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102565 - Session Fixation
CVE-2024-11317		 CWE-384 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102564 - Allocation of Resources Without Limits or Throttling
CVE-2024-11316		 CWE-770 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102563 - Off-by-one Error
CVE-2024-51554		 CWE-193 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102562 - Improper input validation
CVE-2024-51550		 CWE-20 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102561 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-51549		 CWE-22 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102560 - Unrestricted Upload of File with Dangerous Type
CVE-2024-51548		 CWE-434 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102559 - Improper input validation
CVE-2024-51546		 CWE-20 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102558 - Insufficiently Protected Credentials
CVE-2024-51545		 CWE-522 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102557 - External Control of System or Configuration Setting
CVE-2024-51544		 CWE-15 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102556 - External Control of System or Configuration Setting
CVE-2024-51543		 CWE-15 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102555 - Files or Directories Accessible to External Parties
CVE-2024-51542		 CWE-552 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102554 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-51541		 CWE-98 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102553 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48840		 CWE-94 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102552 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48839		 CWE-94 High
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102551 - Cross-Site Request Forgery (CSRF)
CVE-2024-48846		 CWE-352 Low
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102550 - Allocation of Resources Without Limits or Throttling
CVE-2024-48844		 CWE-770 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102547 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-48843		 CWE-89 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102546 - Server-Side Request Forgery (SSRF)
CVE-2024-6784		 CWE-918 Medium
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6516		 CWE-79 Low
No
No
 3.08.03 13.01.2025 SB2025011336
#VU102544 - Cleartext Transmission of Sensitive Information
CVE-2024-6515		 CWE-319 Medium
No
No
 3.08.03 13.01.2025 SB2025011336