A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
CVSS
6.7
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
16d ago · NVD
Added to TCL Advisory
10d ago · TCL Advisory
Added to CISA KEV
10d ago · CISA
Exploitation Status Changed
10d ago · TCL Advisory
NVD · Updated 10d ago
CISA KEV · Updated 12d ago