Design/Logic Flaw

2019-06-1216:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON

The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application’s direct control and outside the intended directories.

CPENameOperatorVersion
network_configurator_for_devicenet_safetyle3.41

CPE	Name	Operator	Version
	network_configurator_for_devicenet_safety	le	3.41

References

ics-cert.us-cert.gov/advisories/ICSA-19-134-01