CWE Code: 427
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Uncontrolled Search Path Element
Summary: untrusted search path vulnerability in nfc port software version 5.5.0.6 and earlier (for rc-s310, rc-s320, rc-s330, rc-s370, rc-s380, rc-s380/s), nfc port software version 5.3.6.7 and earlier (for rc-s320, rc-s310/j1c, rc-s310/ed4c), pc/sc activator for type b ver.1.2.1.0 and earlier, sfcard viewer 2 ver.2.5.0.0 and earlier, nfc net installer ver.1.1.0.0 and earlier allows an attacker to gain privileges via a trojan horse dll in an unspecified directory.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-08-02
Last Modified Date: 2017-08-23
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Uncontrolled Search Path Element.
user
CWE Code: 427
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Uncontrolled Search Path Element
Summary: untrusted search path vulnerability in nfc port software version 5.5.0.6 and earlier (for rc-s310, rc-s320, rc-s330, rc-s370, rc-s380, rc-s380/s), nfc port software version 5.3.6.7 and earlier (for rc-s320, rc-s310/j1c, rc-s310/ed4c), pc/sc activator for type b ver.1.2.1.0 and earlier, sfcard viewer 2 ver.2.5.0.0 and earlier, nfc net installer ver.1.1.0.0 and earlier allows an attacker to gain privileges via a trojan horse dll in an unspecified directory.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-08-02
Last Modified Date: 2017-08-23
assistant