Untrusted Search Path Vulnerability in MLIT DenshiSeikabutsuSakuseiShienKensa System Installer
CVE-2017-2231

7.8HIGH

What is CVE-2017-2231?

The installer of the MLIT DenshiSeikabutsuSakuseiShienKensa system up to version 3.02, distributed until June 20, 2017, contains an untrusted search path vulnerability. This flaw allows an attacker to execute malicious DLLs placed in unspecified directories, potentially granting elevated privileges. Exploiting this vulnerability could result in unauthorized actions within the affected system, impacting its integrity and security.

Affected Version(s)

The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017

The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.