PT-2017-13187 · I Sens · I-Sens Smartlog Diabetes Management

Publicado 2017-10-04 · Atualizado 2019-10-09 · CVE-2017-13993

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions i-SENS SmartLog Diabetes Management Software versions 2.4.0 and prior

Description An Uncontrolled Search Path or Element issue was discovered, which could be exploited by placing a specially crafted DLL file in the search path, allowing an attacker to execute arbitrary code on the system if the malicious DLL is loaded prior to the valid DLL.

Recommendations For i-SENS SmartLog Diabetes Management Software versions 2.4.0 and prior, consider restricting access to the search path to prevent malicious DLL files from being loaded, until a patch or fix is available.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-428

CWE-427

Identificadores relacionados

CVE-2017-13993

Produtos afetados

I-Sens Smartlog Diabetes Management

Referências · 4

• http://securityfocus.com/bid/100659 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-13993 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13993 · Aviso do Fabricante