Vulnerability CVE-2017-5147

Vulnerability CVE-2017-5147

Published: 2017-09-08 Modified: 2017-09-09

Description:

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path.

Type:

CWE-427

(Uncontrolled Search Path Element)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
4.6/10	6.4/10	3.9/10

Exploit range	Attack complexity	Authentication
Local	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Azeotech -> Daqfactory

References:

http://www.securityfocus.com/bid/100522

https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01

Copyright 2024, cxsecurity.com