AVEVA Vijeo Citect and Citect SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: AVEVA Software, LLC AVEVA Equipment: Vijeo Citect, Citect SCADA Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute...

CVE-2018-7799

CVE-2018-7799 corresponds to a DLL hijacking vulnerability in Schneider Electric Software Update (SESU) prior to v2.2.0. The issue is classified as CWE-427 Uncontrolled Search Path Element and can allow an attacker with local access to place a crafted DLL and execute arbitrary code on the target ...