CVE-2024-13946

MEDIUM

ASPECT-Enterprise <3.* - Binary Planting

Title source: llm

Description

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Exploits (1)

exploitdb WORKING POC

by LiquidWorm · textlocalmultiple

https://www.exploit-db.com/exploits/52306

View Code ZIP pw:eip

References (1)

[Various Sources] https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&LanguageCode=en&DocumentPartId=pdf&Action=Launch

Scores

CVSS v3 6.8

EPSS 0.0111

EPSS Percentile 78.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-427

Status published

Products (3)

ABB/ASPECT-Enterprise < 3.*

ABB/MATRIX Series < 3.*

ABB/NEXUS Series < 3.*

Published May 22, 2025

Tracked Since Feb 18, 2026