Vulnerabilities > CVE-2017-9961 - Unspecified vulnerability in Schneider-Electric Pro-Face GP PRO EX 4.07.000
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |