// For flags

CVE-2017-14010

 

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system.

En SpiderControl MicroBrowser en Windows XP, Vista 7, 8 y 10, en sus versiones 1.6.30.144 y anteriores, se ha identificado una vulnerabilidad no controlada del elemento de ruta de búsqueda que podría explotarse colocando un archivo DLL especialmente manipulado en la ruta de búsqueda. Si el DLL malicioso se carga antes que el DLL válido, un atacante podría ejecutar código arbitrario en el sistema.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-08-30 CVE Reserved
  • 2018-04-26 CVE Published
  • 2023-09-17 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-427: Uncontrolled Search Path Element
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Spidercontrol
Search vendor "Spidercontrol"
Scada Microbrowser
Search vendor "Spidercontrol" for product "Scada Microbrowser"
<= 1.6.30.144
Search vendor "Spidercontrol" for product "Scada Microbrowser" and version " <= 1.6.30.144"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 10
Search vendor "Microsoft" for product "Windows 10"
*-
Safe
Spidercontrol
Search vendor "Spidercontrol"
Scada Microbrowser
Search vendor "Spidercontrol" for product "Scada Microbrowser"
<= 1.6.30.144
Search vendor "Spidercontrol" for product "Scada Microbrowser" and version " <= 1.6.30.144"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
*-
Safe
Spidercontrol
Search vendor "Spidercontrol"
Scada Microbrowser
Search vendor "Spidercontrol" for product "Scada Microbrowser"
<= 1.6.30.144
Search vendor "Spidercontrol" for product "Scada Microbrowser" and version " <= 1.6.30.144"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 8
Search vendor "Microsoft" for product "Windows 8"
*-
Safe
Spidercontrol
Search vendor "Spidercontrol"
Scada Microbrowser
Search vendor "Spidercontrol" for product "Scada Microbrowser"
<= 1.6.30.144
Search vendor "Spidercontrol" for product "Scada Microbrowser" and version " <= 1.6.30.144"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Vista
Search vendor "Microsoft" for product "Windows Vista"
*-
Safe
Spidercontrol
Search vendor "Spidercontrol"
Scada Microbrowser
Search vendor "Spidercontrol" for product "Scada Microbrowser"
<= 1.6.30.144
Search vendor "Spidercontrol" for product "Scada Microbrowser" and version " <= 1.6.30.144"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*-
Safe