PT-2019-6001 · Proclima · Proclima
CVE-2019-6825
·
Publicado
2019-07-11
·
Atualizado
2022-09-03
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ProClima versions prior to 8.0.0
Description
A vulnerability exists in the software that could allow a malicious DLL file, with the same name as any resident DLLs inside the software installation, to execute arbitrary code. This issue is related to an uncontrolled search path element. Exploitation of the vulnerability may allow an attacker to execute arbitrary code.
Recommendations
For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the software installation directory to minimize the risk of exploitation. Avoid using the software until the issue is resolved.
Correção
Uncontrolled Search Path Element
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Proclima