Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v748-x926-p5r2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application directory as the portable IP Helper application.

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application directory as the portable IP Helper application.

EPSS

Процентиль: 19%
0.00061
Низкий

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application directory as the portable IP Helper application.

EPSS

Процентиль: 19%
0.00061
Низкий

Дефекты

CWE-427