The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
Source: Mitre, NVD
Published: 2019-04-11
Updated: 2024-11-21
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Severity: Medium
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: High
EPSS: 0.00744