CVE-2020-6654

CVE-2020-6654 describes a DLL hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v2.0.38 and earlier. The software loads vci11un6.DLL and cinpl.DLL and can load malicious DLLs, enabling arbitrary code execution. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack ...