PT-2017-13187 · I Sens · I-Sens Smartlog Diabetes Management

Published 2017-10-04 · Updated 2019-10-09 · CVE-2017-13993

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions i-SENS SmartLog Diabetes Management Software versions 2.4.0 and prior

Description An Uncontrolled Search Path or Element issue was discovered, which could be exploited by placing a specially crafted DLL file in the search path, allowing an attacker to execute arbitrary code on the system if the malicious DLL is loaded prior to the valid DLL.

Recommendations For i-SENS SmartLog Diabetes Management Software versions 2.4.0 and prior, consider restricting access to the search path to prevent malicious DLL files from being loaded, until a patch or fix is available.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-428

CWE-427

Related Identifiers

CVE-2017-13993

Affected Products

I-Sens Smartlog Diabetes Management

References · 4

• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-13993 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13993 · Vendor Advisory
• http://securityfocus.com/bid/100659 · Note