CVE-2017-9646 An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarcontrols heating control downloader | <= 1.0.1.15 | No fix listed |
References
- 100261 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource