[Control systems] ABB security advisory (AV25-062)

Serial number: AV25-062
Date: February 6, 2025

On February 6, 2025, ABB published a security advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• ASPECT Enterprise ASP-ENT-x – version 3.08.03 and prior
• NEXUS Series NEX-2x and NEXUS-3-x – version 3.08.03 and prior
• MATRIX Series MAT-x – version 3.08.03 and prior

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• ELSB/BLBA, Hard-coded credentials in ASPECT Energy Management System (PDF)
• ABB Cyber security alerts and notifications