ABP and AES vulnerabilities

2 known vulnerabilities in ABP and AES from Asustor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  ABP and AES: Uncontrolled Search Path Element

  CVE-2025-13051Nov 19, 2025Asustor

  When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the L

• 9.2 Critical severity

  ABP and AES: Unquoted Search Path or Element

  CVE-2025-8070Jul 23, 2025Asustor

  The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability. This allows a local attacker to execute arbitrary code by placing a malicious executable in a predictable location such as C:\Program.exe. If the serv