PT-2021-11826 · Microsoft+1 · Windows+1

Published 2021-01-13 · Updated 2021-01-22 · CVE-2020-35686

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Sound Research DCHU model software component modules (APO) versions 2.0.9.17 and earlier

Description: The issue allows escalation of privilege via a fake DLL.

Recommendations: For versions 2.0.9.17 and earlier, update to 2.0.9.18 or later via Windows Update.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2020-35686

Affected Products

Sound Research Dchu Model

Windows

References · 5

• https://soundresearch.com/wp-content/uploads/static/CVE-2020-35686.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35686 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35686 · Vendor Advisory
• https://t.me/cvenotify/8845 · Telegram Post
• https://t.me/cvenotify/8467 · Telegram Post