ABB NEXUS Series

• CVE-2024-13945 Medium 6.0 Stored Absolute Path Traversal 0.4%
• CVE-2024-51552 Medium 6.0 Weak Password Storage 0.3%
• CVE-2024-13958 Medium 4.8 Stored Cross Site Scripting 0.2%
• CVE-2024-13957 High 7.6 SSRF Server Side Request Forgery 0.3%
• CVE-2024-13956 Medium 6.7 SSL Verification Bypass 0.5%
• CVE-2024-13955 High 8.8 SQL Injection 2nd Order 0.4%
• CVE-2024-13954 Medium 6.5 Serialization / Deserialization of configuration data 0.2%
• CVE-2024-13953 Medium 4.9 Sensitive Information disclosed in log files 0.4%
• CVE-2024-13952 High 8.4 Remote Code Execution 0.4%
• CVE-2024-51553 Medium 6.5 Predictable Filename 0.4%
• CVE-2024-13951 High 7.6 One way hash with predictable salt 0.2%
• CVE-2024-13950 Medium 6.8 Log Injection 0.4%
• CVE-2024-13949 Medium 6.8 Log Forging 0.4%
• CVE-2024-48848 Medium 6.5 LARGECONTENT - device disk overutilization 0.4%
• CVE-2024-13948 High 7.3 Insecure Permissions 0.2%
• CVE-2024-13947 Medium 6.0 External System or Configuration Control 0.4%
• CVE-2024-13946 Medium 6.8 Binary Planting / LoadLibrary DLL's not Signed 1.1%
• CVE-2024-13931 High 7.2 Authenticated Relative Path Traversal 0.4%
• CVE-2024-13930 Medium 4.9 Authenticated Unchecked Loop Condition 0.4%
• CVE-2024-13929 High 7.2 Authenticated Servlet Command Injection 0.7%
• CVE-2024-13928 High 7.2 Authenticated SQL Injection 0.4%
• CVE-2025-30169 Medium 6.7 Admin Authorized File Upload and Execute PHP 0.4%
• CVE-2025-30173 Medium 6.7 Admin Authorized File Upload 0.4%
• CVE-2025-30172 High 8.0 Admin Authorized Remote Code Execution 0.6%
• CVE-2025-30171 Critical 9.0 Admin Authorized System File Deletion 0.3%
• CVE-2025-30170 Medium 5.5 Admin Authorized Exposure of file path, file size or file existence 0.3%
• CVE-2025-2409 Critical 9.1 Admin Authorized System File corruption 0.5%
• CVE-2025-2410 Critical 9.1 Admin Authorized Port (iptables) manipulation (open/close/disable ports) 0.5%
• CVE-2024-9639 High 8.0 Authenticated Remote Code Execution 0.7%
• CVE-2024-48850 High 7.2 Authenticated Absolute Path Traversal 0.5%
• CVE-2024-48853 Critical 9.0 Authenticated Escalation to guest to root 0.4%
• CVE-2024-51547 Critical 9.8 Credentials Disclosure - keys 0.6%
• CVE-2024-51555 Critical 10.0 Force Change of Default Credentials 0.4%
• CVE-2024-51554 Critical 9.1 off-by-one-error 0.4%
• CVE-2024-51551 Critical 10.0 Default Credentials 0.4%
• CVE-2024-51550 Critical 10.0 Data Validation / Sanitization 1.8%
• CVE-2024-51549 Critical 10.0 Absolute Path Traversal 0.5%
• CVE-2024-51548 Critical 9.9 Dangerous File Upload 0.6%
• CVE-2024-51546 High 7.5 Credentails Disclosure 1.5%
• CVE-2024-51545 Critical 10.0 Username Enumeration 0.4%
• CVE-2024-51544 High 8.2 Service Control 13.2%
• CVE-2024-51543 High 8.2 Information Disclosure 0.3%
• CVE-2024-51542 High 8.2 Configuration Download 0.3%
• CVE-2024-51541 High 8.2 Local File Inclusion 0.3%
• CVE-2024-48847 High 8.2 MD5 bypass operation 0.3%
• CVE-2024-48846 High 7.1 Cross Side Request Forgery, CSRF 0.6%
• CVE-2024-48845 Critical 9.4 Weak Password Rules/Strength 1.8%
• CVE-2024-48844 High 7.7 Denial of Service, DoS 0.9%
• CVE-2024-48843 High 7.7 Denial of Service, DoS 0.3%
• CVE-2024-48840 Critical 10.0 Unauthorized Access 2.1%