Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-6654

DLL Hijacking

Description

A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton 9000x Programming and Configuration Software

  • unspecified to ≤ 2.0.38affected

References