CVE-2021-34606 XINJE XD/E Series PLC Program Tool DLL Hijacking
Local attackers can execute arbitrary code via DLL hijacking in XINJE PLC programming tools, requiring file-write access to the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-34606?
CVE-2021-34606 is a high-severity vulnerability in XINJE XD/E Series PLC Program Tool, published on 11 May 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, local attacker to load a malicious DLL. Local access is required to successfully exploit this vulnerability. This means the potential attacker must have access to the system and sufficient file-write privileges. If exploited, the attacker could place a malicious DLL file on the system, that when running XINJE XD/E Series PLC Program Tool will allow the attacker to execute arbitrary code with the privileges of another user's account.
Weakness: CWE-427
Which versions are affected by CVE-2021-34606?
It affects 1 product.
Products include Xinje Xd\/E Series Plc Program Tool.
How do I fix CVE-2021-34606?
No fix has been published for CVE-2021-34606 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-34606 being exploited?
There is no known exploitation of CVE-2021-34606 in the wild and no public exploit code.
Other vulnerabilities in XINJE XD/E Series PLC Program Tool
Sources
Also known as GHSA-cgc9-524g-5jwr.