In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CLICK Programming Software (Part Number C0-PGMSW)
Vendor
AutomationDirect
Product
CLICK Programming Software (Part Number C0-PGMSW)
Platforms
Unknown
Default status
Unknown
CLICK Programming Software (Part Number C0-PGMSW) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.10 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
C-More Programming Software (Part Number EA9-PGMSW)
Vendor
AutomationDirect
Product
C-More Programming Software (Part Number EA9-PGMSW)
Platforms
Unknown
Default status
Unknown
C-More Programming Software (Part Number EA9-PGMSW) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.30 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
C-More Micro (Part Number EA-PGMSW)
Vendor
AutomationDirect
Product
C-More Micro (Part Number EA-PGMSW)
Platforms
Unknown
Default status
Unknown
C-More Micro (Part Number EA-PGMSW) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.20.01.0 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
Do-more Designer Software (Part Number DM-PGMSW)
Vendor
AutomationDirect
Product
Do-more Designer Software (Part Number DM-PGMSW)
Platforms
Unknown
Default status
Unknown
Do-more Designer Software (Part Number DM-PGMSW) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
GS Drives Configuration Software (Part Number GSOFT)
Vendor
AutomationDirect
Product
GS Drives Configuration Software (Part Number GSOFT)
Platforms
Unknown
Default status
Unknown
GS Drives Configuration Software (Part Number GSOFT) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.0.6 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)
Vendor
AutomationDirect
Product
SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT)
Platforms
Unknown
Default status
Unknown
SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.0.5 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
DirectSOFT Programming Software
Vendor
AutomationDirect
Product
DirectSOFT Programming Software
Platforms
Unknown
Default status
Unknown
DirectSOFT Programming Software · Scoped product and version facts