CVE-2025-30170 — Admin Authorized Exposure of file path, file size or file existence

CVE-2025-30170

Admin Authorized Exposure of file path, file size or file existence PUBLISHED

Description (CNA)

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected (CNA)

Vendor / product	Versions
ABB / ASPECT-Enterprise	affected 0 through 3.08.03
ABB / NEXUS Series	affected 0 through 3.08.03
ABB / MATRIX Series	affected 0 through 3.08.03

CWE

CWE-497

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.