• 

  (CVE-2018-5457) Vyaire Medical CareFusion Upgrade Utility Vulnerability

  Background: On the 03rd August 2017 I discovered an Uncontrolled Search Path Element (CWE-427) vulnerability in Vyaire Medical’s CareFusion Upgrade Utility software. This vulnerability can be exploited by placing a crafted DLL file in the search path which is loaded prior to a valid DLL, allowing an attacker to hijack the DLL and execute arbitrary […]

  Posted: February 7th, 2018 ˑ  No Comments
  Filled under: Infosec
• 

  (CVE-2017-13993) i-SENS Inc. SmartLog Diabetes Management Software Vulnerability

  Background: On the 03rd August 2017 I discovered an Uncontrolled Search Path Element (CWE-427) vulnerability in i-SENS Inc. SmartLog Diabetes Management Software. This vulnerability can be exploited by placing a crafted DLL file in the search path which is loaded prior to a valid DLL, allowing an attacker to hijack the DLL and execute arbitrary […]

  Posted: September 8th, 2017 ˑ  No Comments
  Filled under: Infosec