RULE(RULE ID:338880)

Rule General Information
Release Date: 2025-05-07
Rule Name: ABB Cylon Aspect 3.08.02 bbmdUpdate.php Remote Code Execution Vulnerability (CVE-2024-51550 CVE-2024-48839)
Severity:
CVE ID:
Rule Protection Details
Description: Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference: https://search.abb.com/library/Download.aspx
Solutions
Refer to the announcement or patch by the vendor: https://search.abb.com/library/Download.aspx