CVEvulnerability
CVE-2017-9646
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-427
Description
An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.
Affected configurations
• solarcontrols heating control downloader (<= 1.0.1.15)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- http://www.securityfocus.com/bid/100261 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/100261 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02 Mitigation, Third Party Advisory, US Government Resource