Insecure Library Loading in Cisco FindIT Network Discovery Utility

CVE-2017-12314

What is CVE-2017-12314?

The Cisco FindIT Network Discovery Utility is vulnerable to DLL preloading attacks, allowing authenticated local attackers to exploit the application by loading a malicious DLL instead of the legitimate one. This weakness potentially leads to partial disruptions in device availability, confidentiality, and integrity. Attackers can exploit this flaw by placing a malicious DLL file within the host system's search path, thus compromising the system’s security. It is crucial for users of the Cisco FindIT Network Discovery Utility to implement necessary measures to prevent exploitation of this vulnerability to safeguard their network environments.

References