VULNERABILITY INTELLIGENCE

CVE-2019-5245

CVSS score5.3 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2019-06-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references