High severity7.2NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-0636

Description

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1.

Affected products

ABB Ltd./ASPECT®-Enterprisev5
Range: 3.0;0
ABB Ltd./NEXUS Seriesv5
Range: 3.0;0
ABB Ltd./MATRIX Seriesv5
Range: 3.0;0
Abb/NEXUS Seriesllm-fuzzy
Range: from 3.0;0 before 3.07.0
Abb/MATRIX Seriesllm-fuzzy
Range: from 3.0;0 before 3.07.1
Abb/ASPECT-Enterprisellm-fuzzy
Range: from 3.0;0 before 3.07.0
Abb/Aspect Ent 2 Firmware
cpe:2.3:o:abb:aspect-ent-2_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Aspect Ent 12 Firmware
cpe:2.3:o:abb:aspect-ent-12_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Aspect Ent 256 Firmware
cpe:2.3:o:abb:aspect-ent-256_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Aspect Ent 96 Firmware
cpe:2.3:o:abb:aspect-ent-96_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 2128 Firmware
cpe:2.3:o:abb:nexus-2128_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 2128 A Firmware
cpe:2.3:o:abb:nexus-2128-a_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 2128 G Firmware
cpe:2.3:o:abb:nexus-2128-g_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 2128 F Firmware
cpe:2.3:o:abb:nexus-2128-f_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 3 2128 Firmware
cpe:2.3:o:abb:nexus-3-2128_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 3 264 Firmware
cpe:2.3:o:abb:nexus-3-264_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 264 Firmware
cpe:2.3:o:abb:nexus-264_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 264 A Firmware
cpe:2.3:o:abb:nexus-264-a_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 264 G Firmware
cpe:2.3:o:abb:nexus-264-g_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Nexus 264 F Firmware
cpe:2.3:o:abb:nexus-264-f_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Matrix 216 Firmware
cpe:2.3:o:abb:matrix-216_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Matrix 232 Firmware
cpe:2.3:o:abb:matrix-232_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Matrix 296 Firmware
cpe:2.3:o:abb:matrix-296_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Matrix 264 Firmware
cpe:2.3:o:abb:matrix-264_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01
Abb/Matrix 11 Firmware
cpe:2.3:o:abb:matrix-11_firmware:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.07.01

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2023-0636

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions