CVE-2017-9644
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.4%
from disclosure to weapon0 days
Published on NVDAug 25
1st PoCAug 22
exploitation probability
1.4%top 30% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges.
Affected products
n/a · Automated Logic Corporation WebCTRL, i-VU, SiteScanpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/42542unverifiedcve_referencewww.exploit-db.com/exploits/42542/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.