CVE-2018-5457

2018-02-0620:00:00

CWE-427

icscert

www.cve.org

0.0004 Low

EPSS

Percentile

0.4%

JSON

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.

CNA Affected

[
  {
    "product": "Vyaire Medical CareFusion Upgrade Utility Vulnerability",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Vyaire Medical CareFusion Upgrade Utility Vulnerability"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102983

ics-cert.us-cert.gov/advisories/ICSMA-18-037-01

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVELIST:CVE-2018-5457