CVE:CVE-2023-0635
CNNVD:CNNVD-202306-188
ABB ASPECT是瑞士ABB公司的一个可扩展建筑能源管理和控制解决方案。
ABB多款产品存在安全漏洞，该漏洞源于允许权限升级。受影响的产品和版本：
ABB ASPECT-Enterprise 3.0.0至3.07.01之前版本；NEXUS Series on NEXUS Series 3.0.0至3.07.01之前版本；MATRIX Series on MATRIX Series 3.0.0至3.07.01之前版本。
solution:Upgrade abb aspect-ent-2_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb aspect-ent-12_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb aspect-ent-256_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb aspect-ent-96_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-2128_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-2128-a_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-2128-g_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-2128-f_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-3-2128_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-3-264_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-264_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-264-a_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-264-g_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb nexus-264-f_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb matrix-216_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb matrix-232_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb matrix-296_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb matrix-264_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01); Upgrade abb matrix-11_firmware to a higher version than 3.07.01,and avoid the version [3.0.0,3.07.01)