First published: Wed Dec 23 2015(Updated: )
Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Opcsystems Opc Systems.net | <=8.00.0023 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-7917 is considered medium due to its potential to allow local users to gain elevated privileges.
To mitigate CVE-2015-7917, ensure that you update Open Automation OPC Systems.NET to version 8.00.0024 or later.
Local users of Open Automation OPC Systems.NET version 8.00.0023 and earlier are impacted by CVE-2015-7917.
CVE-2015-7917 is classified as an untrusted search path vulnerability.
CVE-2015-7917 cannot be exploited remotely; it requires local access to the affected system.