PT-2017-18146
CVE-2017-8137
·
Published
2017-11-22
·
Updated
2017-12-07
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
HedEx versions earlier than V200R006C00
Description
The issue is related to a dynamic link library (DLL) hijacking vulnerability. This occurs because the software calls a DLL file by accessing a relative path, allowing an attacker to potentially tamper with the DLL file and lead to DLL hijacking.
Recommendations
For versions earlier than V200R006C00, update to V200R006C00 or later to resolve the issue. As a temporary workaround, consider restricting access to the relative path used to call the DLL file to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾