CVE-2020-6654: DLL Hijacking
A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-6654?
CVE-2020-6654 is a DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior.
What is the severity of CVE-2020-6654?
The severity of CVE-2020-6654 is high, with a severity score of 7.8.
How can an attacker exploit CVE-2020-6654?
An attacker can exploit CVE-2020-6654 by replacing the required DLLs with malicious DLLs when the software tries to load vci11un6.DLL and cinpl.DLL.
What is the affected software of CVE-2020-6654?
The affected software of CVE-2020-6654 is Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior.
Is there a fix available for CVE-2020-6654?
Yes, it is recommended to update to a fixed version of Eaton's 9000x Programming and Configuration Software to mitigate CVE-2020-6654.