CVE-2025-53187: Unauthenticated RCE
Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prior authentication. This issue affects all versions of ASPECT prior to 3.08.04-s01
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53187?
CVE-2025-53187 is classified as a critical vulnerability that allows for code injection due to improper control of code generation.
How do I fix CVE-2025-53187?
To fix CVE-2025-53187, update ABB ASPECT to version 3.08.04-s01 or later.
What versions of ABB ASPECT are affected by CVE-2025-53187?
CVE-2025-53187 affects all versions of ABB ASPECT before 3.08.04-s01.
What are the potential impacts of CVE-2025-53187?
The potential impacts of CVE-2025-53187 include unauthorized access and control over the affected system.
Is there a workaround for CVE-2025-53187?
There are no documented workarounds for CVE-2025-53187; upgrading is the recommended solution.