CVE-2020-10626

2020-05-1415:52:13

CWE-427

icscert

www.cve.org

0.002 Low

EPSS

Percentile

52.1%

JSON

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.

CNA Affected

[
  {
    "product": "Fazecast jSerialComm, Version 2.2.2 and prior",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fazecast jSerialComm, Version 2.2.2 and prior"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/ICSA2012601

0.002 Low

EPSS

Percentile

52.1%

JSON

Related for CVELIST:CVE-2020-10626