ABB ASPECT, NEXUS, and MATRIX Series Applications Binary Planting Vulnerability Due to Unsigned DLLs

A vulnerability exists in ABB's ASPECT-Enterprise, NEXUS Series, and MATRIX Series applications, all through version 3.*, due to DLLs not being digitally signed when loaded in the ASPECT configuration toolset. This oversight exposes the application to binary planting attacks during device commissioning.

Impact

Exploitation of this vulnerability could lead to binary planting, allowing malicious DLLs to be loaded by the application, potentially leading to arbitrary code execution.