CVE-2020-7360

Name of the Vulnerable Software and Affected Versions SmartControl versions prior to 1.0.7

Description The issue allows an authenticated user to escalate privileges by placing a specially crafted DLL file in the search path. This is related to an Uncontrolled Search Path Element, which can be exploited by placing a malicious DLL in the search path, potentially leading to privilege escalation.

Recommendations For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the search path to prevent malicious DLL placement until the update can be applied.