CVE-2017-9661 An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow...
HighCVSS 7.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplight scada | <= 4.3.0.27 | No fix listed |
References
- 100263 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource