CVE-2018-5457

7.0 highEPSS 0.4%

A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The application loads the DLL and gives the attacker access at the same privilege level as the application.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2018-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vyaire:carefusion_upgrade_utility

References

http://www.securityfocus.com/bid/102983
https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-01
http://www.securityfocus.com/bid/102983
https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-01

Check your stack JSON