CWE Code: 427
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Uncontrolled Search Path Element
Summary: a uncontrolled search path element issue was discovered in vyaire medical carefusion upgrade utility used with windows xp systems, versions 2.0.2.2 and prior versions. a successful exploit of this vulnerability requires the local user to install a crafted dll on the target machine. the application loads the dll and gives the attacker access at the same privilege level as the application.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-02-06
Last Modified Date: 2019-10-09