Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-10549

DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EfficientLab, LLC Controlio

Default version status: unaffected

  • <1.3.95affected

References