CVE-2017-2208

High

Published: 07/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-2208 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Risk Assessment

This vulnerability may lead to unauthorized access to the system and execution of malicious code, posing a serious threat to the organization's security.

Recommendation

It is recommended to update the system to a version released after June 12, 2017, and to monitor and restrict access to unknown directories that may contain executable files.

Other vulnerabilities in Installer of Electronic tendering and bid opening system

CVE-2017-2178High
CVE-2017-2178 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Original NVD description (English source)

Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.