github - ghsa-c97g-x65q-5xr4

GHSA-C97G-X65Q-5XR4

Vulnerability from github – Published: 2022-05-14 03:11 – Updated: 2022-05-14 03:11

Details

In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.

Severity ?

7.8 (High)


                  
                    CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-14020"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-427"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-11-13T20:29:00Z",
    "severity": "HIGH"
  },
  "details": "In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.",
  "id": "GHSA-c97g-x65q-5xr4",
  "modified": "2022-05-14T03:11:43Z",
  "published": "2022-05-14T03:11:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14020"
    },
    {
      "type": "WEB",
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/101780"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2017-14020 (GCVE-0-2017-14020)

Vulnerability from cvelistv5 – Published: 2017-11-13 20:00 – Updated: 2024-09-17 02:16

Summary

Severity ?

No CVSS data available.

CWE

CWE-427 - UNCONTROLLED SEARCH PATH ELEMENT CWE-427

Assigner

icscert

References

URL

Tags

	http://www.securityfocus.com/bid/101780	vdb-entryx_refsource_BID
	https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01	x_refsource_MISC

Impacted products

Vendor

Product

Version

AutomationDirect

CLICK Programming Software (Part Number C0-PGMSW)

Affected: 2.10 and prior

AutomationDirect	C-More Programming Software (Part Number EA9-PGMSW)	Affected: 6.30 and prior
AutomationDirect	C-More Micro (Part Number EA-PGMSW)	Affected: 4.20.01.0 and prior
AutomationDirect	Do-more Designer Software (Part Number DM-PGMSW)	Affected: 2.0.3 and prior
AutomationDirect	GS Drives Configuration Software (Part Number GSOFT)	Affected: 4.0.6 and prior
AutomationDirect	SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)	Affected: 1.1.0.5 and prior
AutomationDirect	DirectSOFT Programming Software	Affected: 6.1 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:13:41.758Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "101780",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101780"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "CLICK Programming Software (Part Number C0-PGMSW)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "2.10 and prior"
            }
          ]
        },
        {
          "product": "C-More Programming Software (Part Number EA9-PGMSW)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "6.30 and prior"
            }
          ]
        },
        {
          "product": "C-More Micro (Part Number EA-PGMSW)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "4.20.01.0 and prior"
            }
          ]
        },
        {
          "product": "Do-more Designer Software (Part Number DM-PGMSW)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.3 and prior"
            }
          ]
        },
        {
          "product": "GS Drives Configuration Software (Part Number GSOFT)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.6 and prior"
            }
          ]
        },
        {
          "product": "SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.0.5 and prior"
            }
          ]
        },
        {
          "product": "DirectSOFT Programming Software",
          "vendor": "AutomationDirect",
          "versions": [
            {
              "status": "affected",
              "version": "6.1 and prior"
            }
          ]
        }
      ],
      "datePublic": "2017-11-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "UNCONTROLLED SEARCH PATH ELEMENT CWE-427",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-31T20:57:01",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "name": "101780",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101780"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2017-11-09T00:00:00",
          "ID": "CVE-2017-14020",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "CLICK Programming Software (Part Number C0-PGMSW)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.10 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "C-More Programming Software (Part Number EA9-PGMSW)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6.30 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "C-More Micro (Part Number EA-PGMSW)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.20.01.0 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Do-more Designer Software (Part Number DM-PGMSW)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.0.3 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "GS Drives Configuration Software (Part Number GSOFT)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.0.6 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.1.0.5 and prior"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "DirectSOFT Programming Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6.1 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "AutomationDirect"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "UNCONTROLLED SEARCH PATH ELEMENT CWE-427"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "101780",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101780"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2017-14020",
    "datePublished": "2017-11-13T20:00:00Z",
    "dateReserved": "2017-08-30T00:00:00",
    "dateUpdated": "2024-09-17T02:16:03.522Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-C97G-X65Q-5XR4

CVE-2017-14020 (GCVE-0-2017-14020)

Tags

Sightings

Nomenclature