CVE-2020-6654CWE-426CWE-427

DLL Hijacking

High · published September 30, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2020-09-30T20:36Z
EPSS history
Timeline
  • 30 SEP 20:36Z
    DLL Hijacking
    cvelistv5