Описание
The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories.
Ссылки
- MitigationThird Party AdvisoryUS Government Resource
- MitigationThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 3.41 (включая)
cpe:2.3:a:omron:network_configurator_for_devicenet_safety:*:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00182
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426
CWE-426
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories.
EPSS
Процентиль: 40%
0.00182
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-426
CWE-426