What’s Vulnerable › Vulnerabilities

CVE-2024-25103: Dynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-06 · updated 2026-06-17
• Weakness: CWE-426

Description

This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.

Affected products

• CDAC AppSamvid Software: through 2.0.1

References

• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0081
• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0081

Get alerted when CVE-2024-25103 or the next vulnerability affects your stack