CVEvulnerability
CVE-2017-9661
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-427
Description
An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code.
Affected configurations
• simplight scada (<= 4.3.0.27)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- http://www.securityfocus.com/bid/100263 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/100263 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01 Mitigation, Third Party Advisory, US Government Resource