New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2017-9648

NVDCIRCLENISA

EUVD-2017-18579 · Published Aug 14, 2017

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.

Technologies

Solarcontrols Wattconfig M

Weaknesses

CWE-427

CVSS scores

  • v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Execution Stealth

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot