CVE-2020-7474 - A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL

Back Back to CVE browser

HIGH

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL

Published Mar 23, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.43%

Description

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL.

Affected products

Vendor n/a Product ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module Default
n/a
- Version
  ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module

n/a

Version	Status	Constraints
ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28599
Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-042-01/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28599		Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-042-01/		x_refsource_MISCVendor Advisory