← CVE Intelligence

CVE-2024-13946

Binary Planting / LoadLibrary DLL's not Signed PUBLISHED

Description (CNA)

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected (CNA)

Vendor / productVersions
ABB / ASPECT-Enterpriseaffected 0 through 3.*
ABB / NEXUS Seriesaffected 0 through 3.*
ABB / MATRIX Seriesaffected 0 through 3.*

CWE

CWE-427

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.