Uncontrolled Search Path Vulnerability in i-SENS SmartLog Diabetes Management Software
CVE-2017-13993

7.8HIGH

Key Information:

Vendor

I-sens

Status
I-sens, Inc. Smartlog Diabetes Management Software
Vendor
CVE Published:
5 October 2017

What is CVE-2017-13993?

An uncontrolled search path vulnerability in i-SENS SmartLog Diabetes Management Software version 2.4.0 and earlier can be exploited by an attacker placing a malicious DLL file in the software's search path. If this crafted DLL is loaded before the legitimate one, it could allow the attacker to execute arbitrary code on the system. It's important to note that this vulnerability does not affect the functioning of connected blood glucose monitors or therapy delivery to patients. Proper safeguards and updates are essential to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

i-SENS, Inc. SmartLog Diabetes Management Software i-SENS, Inc. SmartLog Diabetes Management Software

References

https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01
x_refsource_MISC
http://www.securityfocus.com/bid/100659
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.