title: Dynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software
description: This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system.
Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.
problem types: CWE-426 Untrusted Search Path
affected:
{
defaultStatus: unaffected
product: AppSamvid Software
vendor: CDAC
versions:
status: affected, version: <=2.0.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Upgrade to AppSamvid version 2.0.2 or later.
https://cdac.in/index.aspx?id=cs_eps_appsamvid https://cdac.in/index.aspx