CVE-2018-0621 Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
HighCVSS 7.8
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| logitech connection utility software | < 2.30.9 | 2.30.9 |
| Logicool Co Ltd. the installer of LOGICOOL CONNECTION UTILITY SOFTWARE | = versions before 2.30.9 | No fix listed |
References
- JVN#52574492 third-party-advisory