Description
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gemalto | Sentinel UltraPro | Client Library ux32w.dll Version 1.3.0, Client Library ux32w.dll Version 1.3.1, Client Library ux32w.dll Version 1.3.2 | — |
Advisories 2
- ICSA-19-078-01 AVEVA InduSoft Web Studio and InTouch Edge HMI CISA ICS & IT advisories · Mar 19, 2019
- ICSA-19-073-02 Gemalto Sentinel UltraPro CISA ICS & IT advisories · Mar 14, 2019