CVE-2019-5957: High severity soumu electronic reception and examination of application for radio licenses vulnerability

Q: What access does an attacker need to exploit this issue?

The attack vector is local and requires user interaction. An attacker must rely on a user running the Installer in an environment where a Trojan horse DLL can be loaded from an unspecified directory.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation can allow an attacker to gain privileges. The CVSS vector indicates high impact to confidentiality, integrity, and availability.

Published May 17, 2019

Updated

Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected Software

1 affected component

Soumu Electronic Reception And Examination Of Application For Radio Licenses<=1.0.9.0

Event History

May 17, 2019

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is local and requires user interaction. An attacker must rely on a user running the Installer in an environment where a Trojan horse DLL can be loaded from an unspecified directory.

What is the likely impact if exploitation succeeds?

Successful exploitation can allow an attacker to gain privileges. The CVSS vector indicates high impact to confidentiality, integrity, and availability.

Which versions should be treated as affected?

Electronic reception and examination of application for radio licenses Online Installer version 1.0.9.0 and earlier are affected.