CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Untrusted Search Path
Summary: an issue was discovered in displaylink core software cleaner application 8.2.1956. when the drivers are updated to a newer version, the product launches a process as system to uninstall the old version: cl_1956.exe is run as system on the %systemroot%\temp folder, where any user can write a dll (e.g., version.dll) to perform dll hijacking and elevate privileges to system.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-06-05
Last Modified Date: 2018-08-01