01 Record index
Hard coded default credential contained in install package
Hard coded default credential contained in install package
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
ABB Strongly recommends the following actions on any released SW version of ASPECT: - Change the PHPmyAdmin Password according to the system manual: All customers who operate the ASPECT System with its default password are recommended to replace this default password with a unique, secure password, containing a mix of characters, numbers, and special characters with at least 10 characters in length. - Never expose open ports to the ASPECT product towards the Internet or any insecure network. - When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices. - ABB recommends that customers shall apply the latest product update at the earliest convenience.