Skip to main content

Uncontrolled Search Path Element

CVE-2021-44463

High
8.1/10

Summary

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

  • LOW
  • LOCAL
  • HIGH
  • CHANGED
  • REQUIRED
  • LOW
  • LOW
  • HIGH

CWE-427 - Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References

Advisory Timeline

  • Published