ABB Cylon Aspect Studio Vulnerability: When Your Software’s Best Friend is a Rogue DLL
ABB Cylon Aspect Studio 3.08.03 faces a binary planting vulnerability, making it easier for hackers to plant malicious files like they’re gardening roses. This exploit discovered by Gjoko LiquidWorm Krstic can be tested on Microsoft Windows 10, potentially turning your operating system into a playground for cyber mischief.
Hot Take:
In an unexpected twist, ABB Cylon Aspect Studio seems to have borrowed a page from the “How to Make Friends and Influence People” manual, albeit in the format of DLL planting! This latest vulnerability might leave ABB users questioning if their software isn’t just engineering but also an unintended magic trick for hackers. Maybe this is the real reason they call it “Aspect” Studio—because you’d better inspect every aspect of it!
Key Points:
- Vulnerability found in ABB Cylon Aspect Studio version 3.08.03 and older.
- Identified by Gjoko ‘LiquidWorm’ Krstic from Zero Science Lab.
- Allows for binary planting, a sneaky way to execute malicious code.
- Tested on Microsoft Windows 10 using OpenJDK 64-Bit Server VM Temurin-21.0.6+7.
- Potential for exploitation due to library loading mishaps.