CVE-2024-57964CWE-427

Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program

High · published February 18, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems.

This issue affects HVAC Energy Saving Program:.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-02-18T06:33Z
EPSS history
Timeline
  • 18 FEB 06:33Z
    Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
    cvelistv5