CVE-2018-14797CWE-427

Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and…

published August 23, 2018

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01675 · 76.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2018-08-23T19:00Z
EPSS history
Timeline
  • 23 AUG 19:00Z
    Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and…
    cvelistv5