CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-0636
Critical (9.8) in abb. EPSS 1.3% chance of exploitation in the next 30 days.
Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-77
- Published
- Modified
- Record from
- the NVD, synced
Affected
- abb:aspect-ent-12_firmware
- abb:aspect-ent-256_firmware
- abb:aspect-ent-2_firmware
- abb:aspect-ent-96_firmware
- abb:matrix-11_firmware
- abb:matrix-216_firmware
- abb:matrix-232_firmware
- abb:matrix-264_firmware
- abb:matrix-296_firmware
- abb:nexus-2128-a_firmware
- abb:nexus-2128-f_firmware
- abb:nexus-2128-g_firmware
- abb:nexus-2128_firmware
- abb:nexus-264-a_firmware
- abb:nexus-264-f_firmware
- abb:nexus-264-g_firmware
- abb:nexus-264_firmware
- abb:nexus-3-2128_firmware
- abb:nexus-3-264_firmware