Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-0635 Details

Description

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch	CVE	Vendor Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-1391	Use of Weak Credentials	[email protected]
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
abb aspect-ent-2 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:aspect-ent-2_firmware:::::::: Remediation No remediation found in references.
abb aspect-ent-2	All versions
CPE cpe:2.3:h:abb:aspect-ent-2:-:::::::* Remediation No remediation found in references.
abb aspect-ent-12 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:aspect-ent-12_firmware:::::::: Remediation No remediation found in references.
abb aspect-ent-12	All versions
CPE cpe:2.3:h:abb:aspect-ent-12:-:::::::* Remediation No remediation found in references.
abb aspect-ent-256 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:aspect-ent-256_firmware:::::::: Remediation No remediation found in references.
abb aspect-ent-256	All versions
CPE cpe:2.3:h:abb:aspect-ent-256:-:::::::* Remediation No remediation found in references.
abb aspect-ent-96 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:aspect-ent-96_firmware:::::::: Remediation No remediation found in references.
abb aspect-ent-96	All versions
CPE cpe:2.3:h:abb:aspect-ent-96:-:::::::* Remediation No remediation found in references.
abb nexus-2128 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-2128_firmware:::::::: Remediation No remediation found in references.
abb nexus-2128	All versions
CPE cpe:2.3:h:abb:nexus-2128:-:::::::* Remediation No remediation found in references.
abb nexus-2128-a firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-2128-a_firmware:::::::: Remediation No remediation found in references.
abb nexus-2128-a	All versions
CPE cpe:2.3:h:abb:nexus-2128-a:-:::::::* Remediation No remediation found in references.
abb nexus-2128-g firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-2128-g_firmware:::::::: Remediation No remediation found in references.
abb nexus-2128-g	All versions
CPE cpe:2.3:h:abb:nexus-2128-g:-:::::::* Remediation No remediation found in references.
abb nexus-2128-f firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-2128-f_firmware:::::::: Remediation No remediation found in references.
abb nexus-2128-f	All versions
CPE cpe:2.3:h:abb:nexus-2128-f:-:::::::* Remediation No remediation found in references.
abb nexus-3-2128 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-3-2128_firmware:::::::: Remediation No remediation found in references.
abb nexus-3-2128	All versions
CPE cpe:2.3:h:abb:nexus-3-2128:-:::::::* Remediation No remediation found in references.
abb nexus-3-264 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-3-264_firmware:::::::: Remediation No remediation found in references.
abb nexus-3-264	All versions
CPE cpe:2.3:h:abb:nexus-3-264:-:::::::* Remediation No remediation found in references.
abb nexus-264 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-264_firmware:::::::: Remediation No remediation found in references.
abb nexus-264	All versions
CPE cpe:2.3:h:abb:nexus-264:-:::::::* Remediation No remediation found in references.
abb nexus-264-a firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-264-a_firmware:::::::: Remediation No remediation found in references.
abb nexus-264-a	All versions
CPE cpe:2.3:h:abb:nexus-264-a:-:::::::* Remediation No remediation found in references.
abb nexus-264-g firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-264-g_firmware:::::::: Remediation No remediation found in references.
abb nexus-264-g	All versions
CPE cpe:2.3:h:abb:nexus-264-g:-:::::::* Remediation No remediation found in references.
abb nexus-264-f firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:nexus-264-f_firmware:::::::: Remediation No remediation found in references.
abb nexus-264-f	All versions
CPE cpe:2.3:h:abb:nexus-264-f:-:::::::* Remediation No remediation found in references.
abb matrix-216 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:matrix-216_firmware:::::::: Remediation No remediation found in references.
abb matrix-216	All versions
CPE cpe:2.3:h:abb:matrix-216:-:::::::* Remediation No remediation found in references.
abb matrix-232 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:matrix-232_firmware:::::::: Remediation No remediation found in references.
abb matrix-232	All versions
CPE cpe:2.3:h:abb:matrix-232:-:::::::* Remediation No remediation found in references.
abb matrix-296 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:matrix-296_firmware:::::::: Remediation No remediation found in references.
abb matrix-296	All versions
CPE cpe:2.3:h:abb:matrix-296:-:::::::* Remediation No remediation found in references.
abb matrix-264 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:matrix-264_firmware:::::::: Remediation No remediation found in references.
abb matrix-264	All versions
CPE cpe:2.3:h:abb:matrix-264:-:::::::* Remediation No remediation found in references.
abb matrix-11 firmware	>= 3.0.0, < 3.07.01
CPE cpe:2.3:o:abb:matrix-11_firmware:::::::: Remediation No remediation found in references.
abb matrix-11	All versions
CPE cpe:2.3:h:abb:matrix-11:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Sep 19, 2024	CVE Modified	[email protected]
May 14, 2024	CVE Modified	[email protected]
Jun 13, 2023	Initial Analysis	[email protected]

CVE-2023-0635 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation