Read the docs
TI-2023-00601 Aliases CVE-2023-0635GHSA-rhfh-gm98-5fx4

Privilege escalation to root

Priority MEDIUM 43CWE-1391Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00374 31st percentileScored 2026-11-07
Fix Fixed ASPECT®-Enterprise (ABB Ltd.): 3.07.01NEXUS Series (ABB Ltd.): 3.07.01+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBASPECT®-Enterprise3.0;0 to before 3.07.013.07.01Patch availableCNA
ABBNEXUS Series3.0;0 to before 3.07.013.07.01Patch availableCNA
ABBMATRIX Series3.0;0 to before 3.07.013.07.01Patch availableCNA
  • ASPECT®-Enterprise VendorABB Affected 3.0;0 to before 3.07.01 Fixed in 3.07.01 Patch available CNA
  • NEXUS Series VendorABB Affected 3.0;0 to before 3.07.01 Fixed in 3.07.01 Patch available CNA
  • MATRIX Series VendorABB Affected 3.0;0 to before 3.07.01 Fixed in 3.07.01 Patch available CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB

Remediation

  • Fix · CNA ASPECT®-Enterprise (ABB Ltd.) Fixed in 3.07.01
  • Fix · CNA NEXUS Series (ABB Ltd.) Fixed in 3.07.01
  • Fix · CNA MATRIX Series (ABB Ltd.) Fixed in 3.07.01

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-0635
  2. 2026-10-03 Alias added: GHSA-rhfh-gm98-5fx4

References

Advisory 1

  • TI-2024-05845 Remote code execution in ABB ASPECT-Enterprise CVSS 4.0CRITICAL 9.4
  • TI-2024-34459 Service control in ABB ASPECT-Enterprise CVSS 4.0HIGH 8.8
  • TI-2024-05758 unauthorized file access CVSS 4.0CRITICAL 9.4
  • TI-2024-32539 Remote code execution, RCE in ABB ASPECT-Enterprise CVSS 4.0CRITICAL 9.3
  • TI-2024-34465 Data Validation / Sanitization CVSS 4.0CRITICAL 9.3
  • TI-2024-32545 Weak Password Rules/Strength CVSS 4.0CRITICAL 9.3
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences