VULNERABILITY INTELLIGENCE

CVE-2017-12653

CVSS score7.8 HIGH
EPSS probability1.98%
CISA KEVNot currently listed
Published2017-08-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references