Description (CNA)
Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fuji Electric Co.,Ltd. / Pupsman | affected prior to 3.9.0 |
CWE
CWE-427
References
- https://www.fujielectric.co.jp/products/power_supply/ups/product_detail/software_pupsman.html
- https://jvn.jp/en/jp/JVN62347140/
ADP enrichment
No English description supplied.
No references supplied.