CVE-2016-2542

highPriorität · verfolgen · 31EPSS 0.005 · 43. PerzentilEUJPRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.50% (43rd) EPSS
CVSS 7.2 · high
Is it mine?
43 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenFlexera InstallShieldcisa_csaf_ot

    It is recommended that users contact the product's vendor support team for guidance on any mitigations and workarounds regarding Flexera InstallShield issues in relation to that product.

  • BehobenMitsubishi Electric Numerical Control Device Communication Software (FCSB1224)cisa_csaf_ot

    Please download and install the fixed version from the Mitsubishi Electric download site: Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): "A9" or later https://www.mitsubishielectric.com/fa/download/index.html.

  • BehobenNC Trainer2cisa_csaf_ot

    Please download and install the fixed version from the Mitsubishi Electric download site: NC Trainer2: "AC" or later https://www.mitsubishielectric.com/fa/download/index.html.

  • BehobenNC Trainer2 pluscisa_csaf_ot

    Please download and install the fixed version from the Mitsubishi Electric download site: NC Trainer2 plus: "AC" or later https://www.mitsubishielectric.com/fa/download/index.html.

  • BehobenNC Virtual Simulatorcisa_csaf_ot

    Please download and install the fixed version from the Mitsubishi Electric download site: NC Virtual Simulator: "A5" or later https://www.mitsubishielectric.com/fa/download/index.html.

  • MitigationFlexera InstallShieldcisa_csaf_ot

    For more information see Flexera's KBR-Article.

    https://community.flexera.com/t5/InstallShield-Knowledge-Base/Windows-loads-a-different-library-or-launches-a-different/ta-p/4739
  • MitigationAVEVA Edge 2020cisa_csaf_ot

    AVEVA recommends organizations evaluate the impact of these vulnerabilities based on operational environment, architecture, and product implementations.

  • MitigationMS Configuratorcisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationMitsubishi Electric CNC communication software runtime library M70LC cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationMitsubishi Electric CNC communication software runtime library M730LCcisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationMitsubishi Electric Numerical Control Device Communication Software (FCSB1224)cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Analyzercisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Analyzer2cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Configurator2cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Designercisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Designer2cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Explorercisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Monitorcisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Monitor2cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Trainercisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Trainer pluscisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Trainer2cisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Trainer2 pluscisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Virtual Simulatorcisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationNC Visualizercisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

  • MitigationRemote Monitor Toolcisa_csaf_ot

    Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.17highCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (43)

Betroffene Produkte und Versionsbereiche.

20 von 43 angezeigt
05

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

06

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2016-02-24geändert 2026-06-17
08

Referenzen (20)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan