CVE-2017-14010: High severity spidercontrol scada microbrowser vulnerability
In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-14010?
CVE-2017-14010 is a vulnerability in SpiderControl MicroBrowser versions 1.6.30.144 and prior on Windows XP, Vista 7, 8, and 10 that allows an attacker to exploit an uncontrolled search path element.
How can an attacker exploit CVE-2017-14010?
An attacker can exploit CVE-2017-14010 by placing a specially crafted DLL file in the search path, which can be loaded prior to the valid DLLs, allowing the attacker to execute arbitrary code.
What is the severity of CVE-2017-14010?
CVE-2017-14010 has a severity rating of 7.8 (High).
Which versions of SpiderControl MicroBrowser are affected by CVE-2017-14010?
SpiderControl MicroBrowser versions 1.6.30.144 and prior are affected by CVE-2017-14010.
How can I mitigate the vulnerability CVE-2017-14010?
To mitigate CVE-2017-14010, update to a version of SpiderControl MicroBrowser that is not affected by the vulnerability and ensure that only trusted DLLs are loaded in the search path.