Get real-time updates on Telegram
P5
CVE-2025-13051: ABP and AES ABP 2.0 through 2.0.7.9050, AES 1.0 through 1.0.6.8290
CVE-2025-13051. EPSS 0.0019 (percentile 0.0803), scored 17-Oct-2026.
Affected technology
ABP and AES · ABP 2.0 through 2.0.7.9050, AES 1.0 through 1.0.6.8290
ASUSTOR
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required
What an attacker can do
The source says when the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-427
- CCR priority
- 0.0 /100 (P5)
- EPSS
- 0.0019 · percentile 0.0803 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-13051.html