CVE-2017-5147

CVE-2017-5147 describes an uncontrolled search path element vulnerability in AzeoTech DAQFactory before version 17.1. The issue allows a local attacker to have the program load a malicious DLL placed in the search path, potentially affecting integrity/availability. ICS-CERT/vulnerability details ...

CVE-2017-12699

CVE-2017-12699 affects AzeoTech DAQFactory prior to 17.1. Two vulnerabilities are described: (1) Incorrect Default Permissions (CWE-276) allowing local, non-administrative users to replace or modify application files with malicious ones; (2) Uncontrolled Search Path Element (CWE-427) that could e...