CVE-2025-13051: Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges
When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in unauthorized code execution with elevated privileges. This issue affects ABP and AES: from ABP 2.0 through 2.0.7.9050, from AES 1.0 through 1.0.6.8290.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13051?
CVE-2025-13051 has been rated as high severity due to its potential for unauthorized DLL execution.
How do I fix CVE-2025-13051?
To fix CVE-2025-13051, ensure that the directories containing the ABP and AES services are not writable by non-administrative users.
What versions are affected by CVE-2025-13051?
CVE-2025-13051 affects ABP versions from 2.0.0 to 2.0.7.9050 and AES versions from 1.0.0 to 1.0.6.8290.
What is the impact of CVE-2025-13051?
The impact of CVE-2025-13051 allows an attacker to execute malicious DLLs with LocalSystem privileges, potentially compromising the system.
Who is at risk for CVE-2025-13051?
Users and organizations running vulnerable versions of ABP and AES on systems with improper directory permissions are at risk for CVE-2025-13051.