// For flags

CVE-2015-2264

 

Severity Score

7.3
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, or (d) surewarehook.dll file in an unspecified directory.

Múltiples vulnerabilidades de ruta de búsqueda no confiable en (1) EQATEC.Analytics.Monitor.Win32_vc100.dll y (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll en Telerik Analytics Monitor Library anterior a 3.2.125 permiten a usuarios locales ganar privilegios a través de un fichero (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, o (d) surewarehook.dll troyano en un directorio no especificado.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-03-09 CVE Reserved
  • 2015-03-13 CVE Published
  • 2024-08-06 CVE Updated
  • 2025-04-12 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (1)
URL Tag Source
http://www.kb.cert.org/vuls/id/794095 Third Party Advisory
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Telerik
Search vendor "Telerik"
 Analytics Monitor Library
Search vendor "Telerik" for product "Analytics Monitor Library"
 <= 3.2.122
Search vendor "Telerik" for product "Analytics Monitor Library" and version " <= 3.2.122"
-
Affected