CVE-2019-10971

High

Description

The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories.

SeverityHigh
CVSS7.8
Exploit probability—
ProductOmron Network Configurator For Devicenet Safety
PublishedJun 12, 2019
First seenJun 12, 2019
Weakness typeCWE-426CWE-426

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
omron network_configurator_for_devicenet_safetyv ≤ 3.41—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-10971 · Omron Network Configurator For Devicenet Safety · Dark Radar