high7.8
CVE-2020-10626
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any …
Impact
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fazecast | Jserialcomm | through 2.2.2 |
| Schneider-Electric | Ecostruxure It Gateway | from 1.5.0.66 through 1.5.2.28 from 1.6.0.39 through 1.6.2.14 Version 1.7.0.64 |