DLL Hijacking Vulnerability in Schneider Electric IGSS Software
CVE-2017-6033
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 7 April 2017
What is CVE-2017-6033?
A DLL Hijacking vulnerability was identified in Schneider Electric's Interactive Graphical SCADA System (IGSS) Software. This flaw allows an attacker to exploit the software by placing a malicious DLL file in a directory that is searched before the legitimate DLL file. As a result, when IGSS Software attempts to load the legitimate DLL, it inadvertently executes the malicious version instead, potentially compromising the system. This can lead to unauthorized actions and a breach of system integrity, making it essential for users to apply necessary security updates and follow best practices to mitigate risks.
Affected Version(s)
Schneider Electric Interactive Graphical SCADA System Software Schneider Electric Interactive Graphical SCADA System Software