CVE-2017-14029
HighSummary
An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.
Risk Assessment
Malicious dll files may be executed without user knowledge, posing a risk of system compromise. This can lead to serious security breaches within the organization.
Recommendation
It is recommended to update VTScada software to the latest version to mitigate this vulnerability. Additionally, monitor and restrict access to directories where malicious files may be placed.
Other vulnerabilities in Trihedral VTScada
See all- CVE-2017-14031High
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine.
- CVE-2017-6045High
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users, which may contain sensitive configuration information.
- CVE-2017-6043High
A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available.
- CVE-2016-4510Critical
The WAP interface in Trihedral VTScada in versions 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
Original NVD description (English source)
An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.