ABB ASPECT, NEXUS, and MATRIX Cybersecurity Advisory

This cybersecurity advisory from ABB warns that ASPECT, NEXUS, and MATRIX systems running firmware versions below 3.07.02 contain a hard-coded default credential (CVE-2024-4007) in the install package, which can be exploited if the system is exposed to the internet without proper firewalling. An attacker gaining access via the default PHPmyAdmin password could achieve remote control of the product, and ABB recommends immediate password changes, network isolation, and applying the latest firmware update.