CVE-2017-14029

Published: Nov 6, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.

Affected (1)

Products: Trihedral: Vtscada

Trihedral

1 product

Vtscada

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Trihedral Vtscada	Up to 11.3.03

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02

Source: ics-cert@hq.dhs.gov

Issue TrackingMitigationThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.