CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

Path traversal

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

CVE-2022-23449

Siemens SIMATIC Energy Manager Basic (all versions < 7.3 Update 1) and PRO (all versions

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account

...

多款 Siemens 产品安全特征问题漏洞

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.A security vulnerability exists in Siemens SCALANCE X-300 Switch Family Devices tha...

CVE-2022-27842

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

CVE-2022-27842

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

CVE-2022-27842

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

Code injection

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

Code injection

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

CVE-2022-27843

The CVE-2022-27843 entry describes a DLL hijacking vulnerability in Samsung Kies prior to version 2.6.4.22014_2, which could allow an attacker to execute arbitrary code. Affected product: Kies (Samsung Kies desktop software); affected component: the DLL handling path resolution leading to hijack....

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

CVE-2022-27842

CVE-2022-27842 is a DLL hijacking vulnerability in Samsung Smart Switch PC for Windows, exploitable prior to version 4.2.22022_4. The underlying issue is incorrect loading of a DLL, enabling arbitrary code execution by a local attacker. Affected software is Samsung Smart Switch PC; exploitation d...

CVE-2022-27842

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.220224 allows attacker to execute abitrary code...

CVE-2022-1252 Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...