CVE-2025-30169 — Admin Authorized File Upload and Execute PHP

CVE-2025-30169

Admin Authorized File Upload and Execute PHP PUBLISHED

Description (CNA)

File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected (CNA)

Vendor / product	Versions
ABB / ASPECT-Enterprise	affected 0 through 3.08.03
ABB / NEXUS Series	affected 0 through 3.08.03
ABB / MATRIX Series	affected 0 through 3.08.03

CWE

CWE-434

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.