CVE-2018-5457 A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vul...
HighCVSS 7.0
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vyaire carefusion upgrade utility | <= 2.0.2.2 | No fix listed |
References
- 102983 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource