CVE-2017-2178

CVE-2017-2178 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.

It is recommended to update the system to a version released after May 25, 2017, and to monitor and restrict access to directories where malicious files may be placed.