New MCP server — Bring vulnerability intelligence into your AI
Patrowl Intel
Back to feed

CVE-2017-14397

NVDCIRCLENISA

EUVD-2017-5900 · Published Sep 12, 2017

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

Technologies

Anydesk AnydeskMicrosoft Windows

Weaknesses

CWE-74

CVSS scores

  • v3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Execution Stealth Defense Impairment
T1190Exploit Public-Facing ApplicationT1027Obfuscated Files or InformationT1574.006Dynamic Linker HijackingT1574.007Path Interception by PATH Environment VariableT1690Prevent Command History Logging

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

Book your demo
PatrowlIntel platform screenshot