exploitDog

CVE-2015-2264

Опубликовано: 13 мар. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, or (d) surewarehook.dll file in an unspecified directory.

Комментарий

CWE-426: Untrusted Search Path

Ссылки

http://www.kb.cert.org/vuls/id/794095
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/794095
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:telerik:analytics_monitor_library:*:*:*:*:*:*:*:*

Версия до 3.2.122 (включая)

EPSS

Процентиль: 26%

0.0009

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-55gj-vmg5-qqmm

github

больше 3 лет назад

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, or (d) surewarehook.dll file in an unspecified directory.

EPSS

Процентиль: 26%

0.0009

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other