← Back to home
ICSA-25-051-01  ·  Published 2025-02-05  ·  View on CISA ICS-CERT ↗

ABB ASPECT-Enterprise NEXUS and MATRIX Series

CVSS 9.8 CRITICAL

CVEs (1)

Remediations

  • Please immediately do the following actions on any released SW version of ASPECT: - Stop and disconnect any ASPECT products that are exposed directly to the Internet, either via a direct ISP connection or via NAT port forwarding. - Ensure that physical controls are in place, so no unauthorized personnel can access your devices, components, peripheral equipment, and networks. - Ensure log-files, downloaded from the equipment is protected against unauthorized access. - Ensure that all ASPECT products are upgraded to the latest firmware version. Please find the latest version of ASPECT firmware on the respective product homepage. - When remote access is required, only use secure methods. If a Virtual Private Network (VPN) is used, ensure that the chosen VPN is secure i.e. updated to the most current version available and configured for secure access.

Affected Vendors

ABB

Affected Products (4)

ABB · ASP-ENT-x <=3.08.03
ABB · NEX-2x <=3.08.03
ABB · <=3.08.02 <=3.08.02
ABB · MAT-x <=3.08.03

Affected Sectors

Critical manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more