CVE-2020-25244CWE-427

A vulnerability has been identified in LOGO!

High · published April 22, 2021

CVSS v3.1
8.4
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking.

Successful exploitation by a local attacker could lead to a takeover of the system

where the software is installed.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-04-22T20:42Z
EPSS history
Timeline
  • 22 APR 20:42Z
    A vulnerability has been identified in LOGO!
    cvelistv5