Description
In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Fazecast jSerialComm, Version 2.2.2 and prior | Fazecast jSerialComm, Version 2.2.2 and prior | — |
Advisories 1
- ICSA-20-126-01 Fazecast jSerialComm CISA ICS & IT advisories · May 5, 2020