CVE-2025-10549
Vulnerability Description
EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected service runs as NT AUTHORITY\SYSTEM.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-427
Source
NVD
Vendor
EfficientLab, LLC
Product
Controlio
Discussion (0)
Add Comment
No comments yet. Be the first!