CVE-2024-13946

MEDIUM

ASPECT-Enterprise <3.* - Binary Planting

Title source: llm

Description

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Exploits (1)

exploitdb WORKING POC

by LiquidWorm · textlocalmultiple

https://www.exploit-db.com/exploits/52306

View Code ZIP pw:eip

References (1)

[Various Sources] https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

Scores

CVSS v3 6.8

EPSS 0.0070

EPSS Percentile 71.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Classification

CWE

CWE-427

Status draft

Timeline

Published May 22, 2025

Tracked Since Feb 18, 2026