CVE-2020-6654

Name of the Vulnerable Software and Affected Versions Eaton's 9000x Programming and Configuration Software versions 2.0.38 and prior

Description A DLL Hijacking issue allows an attacker to execute arbitrary code by replacing required DLLs with malicious ones when the software attempts to load vci11un6.DLL and cinpl.DLL.

Recommendations For versions 2.0.38 and prior, consider restricting access to the vulnerable DLLs vci11un6.DLL and cinpl.DLL to minimize the risk of exploitation until a patch is available.