CVE-2021-38469
Published: 22 October 2021
Summary
CVE-2021-38469 is a critical-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Auvesy Versiondog. Its CVSS base score is 9.1 (Critical).
Operationally, ranked at the 31.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-24921
Vulnerability details
Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking…
more
the loaded DLL.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.