CVE-2020-10626

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.

Score

CVSS 3.1 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-05-14

Last modified

2024-08-04

Weaknesses

CWE-427

Affected products

• Jserialcomm (Fazecast)
• Ecostruxure It Gateway (Schneider-electric)

References

• https://www.us-cert.gov/ics/advisories/ICSA2012601