CVE-2016-2542

highpriority · track · 31EPSS 0.005 · 43 %ileEUJPRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.50% (43rd) EPSS

CVSS 7.2 · high

Is it mine?

43 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedFlexera InstallShieldcisa_csaf_ot
It is recommended that users contact the product's vendor support team for guidance on any mitigations and workarounds regarding Flexera InstallShield issues in relation to that product.
FixedMitsubishi Electric Numerical Control Device Communication Software (FCSB1224)cisa_csaf_ot
Please download and install the fixed version from the Mitsubishi Electric download site: Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): "A9" or later https://www.mitsubishielectric.com/fa/download/index.html.
FixedNC Trainer2cisa_csaf_ot
Please download and install the fixed version from the Mitsubishi Electric download site: NC Trainer2: "AC" or later https://www.mitsubishielectric.com/fa/download/index.html.
FixedNC Trainer2 pluscisa_csaf_ot
Please download and install the fixed version from the Mitsubishi Electric download site: NC Trainer2 plus: "AC" or later https://www.mitsubishielectric.com/fa/download/index.html.
FixedNC Virtual Simulatorcisa_csaf_ot
Please download and install the fixed version from the Mitsubishi Electric download site: NC Virtual Simulator: "A5" or later https://www.mitsubishielectric.com/fa/download/index.html.
MitigationFlexera InstallShieldcisa_csaf_ot
For more information see Flexera's KBR-Article.
https://community.flexera.com/t5/InstallShield-Knowledge-Base/Windows-loads-a-different-library-or-launches-a-different/ta-p/4739
MitigationAVEVA Edge 2020cisa_csaf_ot
AVEVA recommends organizations evaluate the impact of these vulnerabilities based on operational environment, architecture, and product implementations.
MitigationMS Configuratorcisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationMitsubishi Electric CNC communication software runtime library M70LC cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationMitsubishi Electric CNC communication software runtime library M730LCcisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationMitsubishi Electric Numerical Control Device Communication Software (FCSB1224)cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Analyzercisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Analyzer2cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Configurator2cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Designercisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Designer2cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Explorercisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Monitorcisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Monitor2cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Trainercisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Trainer pluscisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Trainer2cisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Trainer2 pluscisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Virtual Simulatorcisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationNC Visualizercisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.
MitigationRemote Monitor Toolcisa_csaf_ot
Before running the setup-launcher, make sure that no DLL exists in the folder containing the setup-launcher executable file (the name varies depending on the product) for the product.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17highCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-426USCWE-427USCWE-427US

affected products (43)

Products and version ranges known to be affected.

Mitsubishi Electric MS Configurator: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric Mitsubishi Electric CNC communication software runtime library M70LC: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric Mitsubishi Electric CNC communication software runtime library M730LC: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric Mitsubishi Electric Numerical Control Device Communication Software (FCSB1224): <="A8"all versionscisa_csaf_otUS
Mitsubishi Electric NC Analyzer2: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Analyzer: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Configurator2: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Designer2: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Designer: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Explorer: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Monitor2: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Monitor: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Trainer plus: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Trainer2 plus: <="AB"all versionscisa_csaf_otUS
Mitsubishi Electric NC Trainer2: <="AB"all versionscisa_csaf_otUS
Mitsubishi Electric NC Trainer: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric NC Virtual Simulator: <="A4"all versionscisa_csaf_otUS
Mitsubishi Electric NC Visualizer: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric Remote Monitor Tool: vers:all/*all versionscisa_csaf_otUS
Mitsubishi Electric MS Configurator≤ vers:all/*cisa_csaf_otUS

showing 20 of 43

advisories (4)

Vendor and ecosystem advisories describing this.

ICSA-20-287-03Flexera InstallShield2020-10-13icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow execution of a malicious DLL.
ICSA-22-326-01AVEVA Edge2022-11-22icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to insert malicious DLL files and trick the application into executing code.
ICSA-25-205-01Mitsubishi Electric CNC Series (Update B)2025-07-24icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow a local attacker to execute malicious code by getting setup-launcher to load a malicious DLL.
JVNDB-2026-001732JVN iPedia advisory JVNDB-2026-0017322026-01-26vendor · jvndbJP

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot jvndb NVD CVE.org MITRE

published 2016-02-24modified 2026-06-17

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan