Vulnerability Description
An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3.5.5.0. A specifically named malicious dll file located in one of directories pointed to by the PATH environment variable will lead to privilege escalation. An attacker with local access to vulnerable system can exploit this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Precision Optimizer | 3.5.5.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/99360Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0247ExploitTechnical DescriptionThird Party Advisory
- http://www.securityfocus.com/bid/99360Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0247ExploitTechnical DescriptionThird Party Advisory
FAQ
What is CVE-2017-2802?
CVE-2017-2802 is a vulnerability with a CVSS score of 7.8 (HIGH). An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3.5.5.0. A specifically named malicious dll file located in o...
How severe is CVE-2017-2802?
CVE-2017-2802 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2802?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Precision Optimizer.