VULNERABILITY INTELLIGENCE
CVE-2010-0103
CVSS score9.3 HIGH
EPSS probability27.34%
CISA KEVNot currently listed
Published2010-03-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')
Primary references
- cret@cert.org — US Government Resource
- cret@cert.org
- cret@cert.org — Exploit
- cret@cert.org — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit