CVE-2016-10157

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Akamai NetSession version 1.9.3.1 is vulnerable to DLL Hijacking as it attempts to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, allowing for DLL hijacking and code injection into the Akamai NetSession process space.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code, potentially leading to system compromise or data theft. Organizations should be aware of the risks associated with unauthorized access to application processes.

Recommendation

It is recommended to update Akamai NetSession to the latest version that addresses this vulnerability. Additionally, monitoring and securing systems against potential DLL Hijacking attacks is advisable.

Original NVD description (English source)

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.