title: Hima: Unquoted path vulnerabilities in HIMA PC based Software
description: In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system.
problem types: CWE-428 Unquoted Search Path or Element
affected:
{
defaultStatus: unaffected
product: HOPCS
vendor: HIMA
versions:
lessThanOrEqual: 3.56.4, status: affected, version: 1.0.0, versionType: semver
}
{
defaultStatus: unaffected
product: X-OPC DA
vendor: HIMA
versions:
lessThanOrEqual: 5.6.1210, status: affected, version: 1.0.0, versionType: semver
}
{
defaultStatus: unaffected
product: X-OPC A+E
vendor: HIMA
versions:
lessThanOrEqual: 5.6.1210, status: affected, version: 1.0.0, versionType: semver
}
{
defaultStatus: unaffected
product: X-OTS
vendor: HIMA
versions:
lessThanOrEqual: 1.32.550, status: affected, version: 1.0.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL