CVE-2018-5457

Severity: high (CVSS 7.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-06 · updated 2026-06-17
Weakness: CWE-427

Description

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.

Affected products

Vyaire Medical CareFusion Upgrade Utility Vulnerability: through 2.0.2.2

References

http://www.securityfocus.com/bid/102983
https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-01
http://www.securityfocus.com/bid/102983
https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-01

Get alerted when CVE-2018-5457 or the next vulnerability affects your stack