CVE-2017-10885

High

Published: 13/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-10885 describes an untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Risk Assessment

The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.

Recommendation

It is recommended to update HYPER SBI to the latest version and review and secure search paths for DLLs.

Other vulnerabilities in HYPER SBI

CVE-2026-42936High
The HYPER SBI 2 installer insecurely loads Dynamic Link Libraries. If a crafted DLL is present in the same directory when the installer is invoked, arbitrary code may be executed with the privilege of the user running the installer.

Original NVD description (English source)

Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.