VULNERABILITY INTELLIGENCE

CVE-2016-10157

CVSS score9.8 CRITICAL
EPSS probability2.31%
CISA KEVNot currently listed
Published2017-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references