Skip to content
OpenAdvisories
High · 7.8 CVE-2020-6654 EUVD-2020-27801GHSA-v9fw-gf3x-98m4

DLL Hijacking

Published Sep 30, 2020 · Updated Sep 16, 2024 · Assigned by Eaton

Description

A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.

Affected products

VendorProductAffectedFixed
Eaton 9000x Programming and Configuration Software unspecified – ≤ 2.0.38 —

References