CVE-2019-17099CWE-426

Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)

Medium · published January 27, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2020-01-27T17:23Z
EPSS history
Timeline
  • 27 JAN 17:23Z
    Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)
    cvelistv5