CVE-2020-7360

CVE-2020-7360 is a local privilege-escalation via an Uncontrolled Search Path Element (CWE-427) in SmartControl. Affected: SmartControl 4.3.15 and earlier releases up to 2020-04-15. Attack involves placing a specially crafted DLL in the software search path to escalate privileges for an authentic...