CVE-2017-14020

🗓️ 13 Nov 2017 20:00:00Reported by icscertType

Uncontrolled search path element (DLL Hijacking) vulnerability in various AutomationDirect softwar

Reporter	Title	Published	Views	Family All 7
CNVD	AutomationDirect Multiple Product DLL Hijacking Vulnerability	13 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-14020	13 Nov 201720:00	–	cvelist
EUVD	EUVD-2017-5535	7 Oct 202500:30	–	euvd
ICS	AutomationDirect CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO, DirectSOFT (Update B)	9 Nov 201700:00	–	ics
ICS	AutomationDirect CLICK, C-More, C-More Micro, Do-more Designer, GS Drives, SL-Soft SOLO (Update A)	9 Nov 201700:00	–	ics
NVD	CVE-2017-14020	13 Nov 201720:29	–	nvd
Prion	Information disclosure	13 Nov 201720:29	–	prion

NVD

Vulners

Node

automationdirect click_plc_firmwareRange≤2.10

AND

automationdirect click_plcMatch-

Node

automationdirect c-more_plc_firmwareRange≤6.30

AND

automationdirect c-more_plcMatch-

Node

automationdirect c-more_micro_firmwareRange≤4.20.01.0

AND

automationdirect c-more_microMatch-

Node

automationdirect gs_drives_fimwareRange≤4.0.6

AND

automationdirect gs_drivesMatch-

Node

automationdirect sl-soft_solo_temperature_controller_firmwareRange≤1.1.0.5

AND

automationdirect sl-soft_solo_temperature_controllerMatch-

[
  {
    "product": "CLICK Programming Software (Part Number C0-PGMSW)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "2.10 and prior"
      }
    ]
  },
  {
    "product": "C-More Programming Software (Part Number EA9-PGMSW)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "6.30 and prior"
      }
    ]
  },
  {
    "product": "C-More Micro (Part Number EA-PGMSW)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "4.20.01.0 and prior"
      }
    ]
  },
  {
    "product": "Do-more Designer Software (Part Number DM-PGMSW)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.3 and prior"
      }
    ]
  },
  {
    "product": "GS Drives Configuration Software (Part Number GSOFT)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.6 and prior"
      }
    ]
  },
  {
    "product": "SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.0.5 and prior"
      }
    ]
  },
  {
    "product": "DirectSOFT Programming Software",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "status": "affected",
        "version": "6.1 and prior"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-313-01
securityfocus	www.securityfocus.com/bid/101780

13 May 2026 00:24Current

7.6High risk

Vulners AI Score7.6

CVSS 37.8

CVSS 29.3

EPSS0.00127

CWE-427