CWE Code: 427
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Uncontrolled Search Path Element
Summary: akeo consulting rufus 3.0 and earlier is affected by: dll search order hijacking. the impact is: arbitrary code execution with escalation of privilege. the component is: executable installers, portable executables (all executables on the web site). the attack vector is: capec-471, cwe-426, cwe-427.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-07-19
Last Modified Date: 2019-07-29