CVE Vulnerabilities

CVE-2024-6079

Externally Controlled Reference to a Resource in Another Sphere

Published: Aug 13, 2024 | Modified: Aug 14, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability exists in the Rockwell Automation Emulate3D™, which could be leveraged to execute a DLL Hijacking attack. The application loads shared libraries, which are readable and writable by any user. If exploited, a malicious user could leverage a malicious dll and perform a remote code execution attack.

Weakness

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

References