PT-2025-47421 · Aes+1 · Aes+1

Published 2025-11-19 · Updated 2025-12-27 · CVE-2025-13051

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions ABP versions 2.0 through 2.0.7.9050 AES versions 1.0 through 1.0.6.8290

Description The services of ABP and AES, when installed in a directory accessible for writing by non-administrative users, are susceptible to DLL hijacking. An attacker can replace or introduce a malicious DLL with the same name as one loaded by the service. Restarting the service then leads to the execution of the malicious DLL under the LocalSystem account, enabling unauthorized code execution with elevated privileges.

Recommendations For ABP versions 2.0 through 2.0.7.9050, ensure the installation directory is not writable by non-administrative users. For AES versions 1.0 through 1.0.6.8290, ensure the installation directory is not writable by non-administrative users.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-13051

Affected Products

Abp

Aes

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-13051 · Security Note
• https://asustor.com/security/security_advisory_detail?id=48 · Vendor Advisory
• https://twitter.com/offseq/status/1991001540446884335 · Twitter Post
• https://t.me/pentestingnews/71092 · Telegram Post
• https://t.me/CVEtracker/37697 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991110005542572273 · Twitter Post
• https://twitter.com/CVEnew/status/1991042926797897963 · Twitter Post
• https://twitter.com/0dayPublishing/status/1990984603872502066 · Twitter Post
• https://twitter.com/Komodosec/status/2004749132565447117 · Twitter Post