Read the docs
TI-2023-00602 Aliases CVE-2023-0636GHSA-rgjp-37vj-5h44

Remote Code Execution via Command Injection

Priority MEDIUM 45CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0131 70th percentileScored 2026-11-07
Fix Fixed ASPECT®-Enterprise (ABB Ltd.): 3.07.0NEXUS Series (ABB Ltd.): 3.07.0+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ABBASPECT®-Enterprise3.0;0 to before 3.07.03.07.0Patch availableCNA
ABBNEXUS Series3.0;0 to before 3.07.03.07.0Patch availableCNA
ABBMATRIX Series3.0;0 to before 3.07.13.07.1Patch availableCNA
  • ASPECT®-Enterprise VendorABB Affected 3.0;0 to before 3.07.0 Fixed in 3.07.0 Patch available CNA
  • NEXUS Series VendorABB Affected 3.0;0 to before 3.07.0 Fixed in 3.07.0 Patch available CNA
  • MATRIX Series VendorABB Affected 3.0;0 to before 3.07.1 Fixed in 3.07.1 Patch available CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-256:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:aspect-ent-96:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:*3.0.0 to before 3.07.01VulnerableABB
cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:*not specified by NVDRunning onABB
  • cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-2128-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-3-2128:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-3-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:nexus-264-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-216:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-232:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-296:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-264:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
  • cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.07.01 Vulnerable ·ABB
  • cpe:2.3:h:abb:matrix-11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB

Remediation

  • Fix · CNA ASPECT®-Enterprise (ABB Ltd.) Fixed in 3.07.0
  • Fix · CNA NEXUS Series (ABB Ltd.) Fixed in 3.07.0
  • Fix · CNA MATRIX Series (ABB Ltd.) Fixed in 3.07.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-0636
  2. 2026-10-03 Alias added: GHSA-rgjp-37vj-5h44

References

Advisory 1

  • TI-2024-05845 Remote code execution in ABB ASPECT-Enterprise CVSS 4.0CRITICAL 9.4
  • TI-2024-34459 Service control in ABB ASPECT-Enterprise CVSS 4.0HIGH 8.8
  • TI-2024-05758 unauthorized file access CVSS 4.0CRITICAL 9.4
  • TI-2024-32539 Remote code execution, RCE in ABB ASPECT-Enterprise CVSS 4.0CRITICAL 9.3
  • TI-2024-34465 Data Validation / Sanitization CVSS 4.0CRITICAL 9.3
  • TI-2024-32545 Weak Password Rules/Strength CVSS 4.0CRITICAL 9.3
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences