Skip to content
Sign in
7.1 High

CVE-2024-13946 DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting…

Description

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected products and versions

Product Affected versions Fixed in
ASPECT-Enterprise Versions not published
NEXUS Series Versions not published
MATRIX Series Versions not published

Other CVEs of ASPECT-Enterprise

The 58 CVEs of ASPECT-Enterprise →
CVE-2024-13945 Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials… 8.4 High CVE-2024-51552 Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue… 7.1 High CVE-2024-13958 Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue… 4.6 Medium CVE-2024-13957 SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis… 7.0 High
Track this CVE