PT-2012-2414 · 7 Technologies · Termius

Published 2012-02-22 · Updated 2012-02-22 · CVE-2012-0223

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies (7T) TERMIS versions 2.10 and earlier

Description The issue is related to an untrusted search path vulnerability, which allows local users to gain privileges. This can be achieved by placing a Trojan horse DLL in the current working directory.

Recommendations For versions 2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-0223

Affected Products

Termius

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-0223 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf · Patch