Administrator-gated code execution via undisclosed mechanism

Improper code generation in ABB ASPECT products through 3.* allows remote authenticated users to execute code through a network interface. ABB has not published the affected code locus or the operation that incorporates attacker-controlled input, and the CNA description instead describes predictable filenames. Exploitation requires compromised administrator credentials, active user interaction, and a misconfigured deployment exposed to an unsecured network; successful execution can compromise confidentiality, integrity, and availability.