CVE-2023-4770CWE-427

Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server

Medium · published November 30, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-11-30T13:32Z
EPSS history
Timeline
  • 30 NOV 13:32Z
    Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server
    cvelistv5