PT-2019-6001 · Proclima · Proclima

CVE-2019-6825

·

Publicado

2019-07-11

·

Atualizado

2022-09-03

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ProClima versions prior to 8.0.0
Description A vulnerability exists in the software that could allow a malicious DLL file, with the same name as any resident DLLs inside the software installation, to execute arbitrary code. This issue is related to an uncontrolled search path element. Exploitation of the vulnerability may allow an attacker to execute arbitrary code.
Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the software installation directory to minimize the risk of exploitation. Avoid using the software until the issue is resolved.

Correção

Uncontrolled Search Path Element

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2021-04274
CVE-2019-6825

Produtos afetados

Proclima