An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code.
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-17-115-01 | third party advisory us government resource |
http://www.securityfocus.com/bid/98031 | vdb entry third party advisory |