CVE-2020-10626: High severity fazecast jserialcomm vulnerability
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10626?
CVE-2020-10626 has a medium severity rating, indicating potential risk for exploitation.
How do I fix CVE-2020-10626?
To mitigate CVE-2020-10626, update Fazecast jSerialComm to version 2.2.3 or later where the vulnerability has been addressed.
What software versions are affected by CVE-2020-10626?
CVE-2020-10626 affects Fazecast jSerialComm versions 2.2.2 and below, as well as specific versions of Schneider Electric EcoStruxure IT Gateway.
What type of attack does CVE-2020-10626 enable?
CVE-2020-10626 enables arbitrary code execution through the use of a malicious DLL file mimicking resident DLL names.
Is CVE-2020-10626 exploitable remotely?
CVE-2020-10626 may be exploited locally, requiring access to the system where the vulnerable software is installed.