high7.8
CVE-2019-6534
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker t…
Impact
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gemalto | Sentinel Ultrapro Client Library | Versions 1.3.0, 1.3.1, 1.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
- https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
- https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
- https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
- https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf