CVE-2024-13946CWE-427

Binary Planting / LoadLibrary DLL's not Signed

High · published May 22, 2025

CVSS v4.0
7.1
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
EPSS
0.01091 · 65.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-05-22T18:09Z
EPSS history
Timeline
  • 22 MAY 18:09Z
    Binary Planting / LoadLibrary DLL's not Signed
    cvelistv5