VULNERABILITY INTELLIGENCE

CVE-2015-2264

CVSS score6.9 MEDIUM

EPSS probability0.50%

CISA KEVNot currently listed

Published2015-03-13

Last modified2026-06-17

CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse (a) csunsapi.dll, (b) swift.dll, (c) nfhwcrhk.dll, or (d) surewarehook.dll file in an unspecified directory.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource