CVE-2017-13993

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. This vulnerability does not affect the connected blood glucose monitor and would not impact delivery of therapy to the patient.

• CWE-428
• CWE-427

• http://www.securityfocus.com/bid/100659Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100659Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-01Patch, Third Party Advisory, US Government Resource

Published

Oct 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13987An insufficient access control vulnerability in ArcSight ESM…
• CVE-2017-13988An improper access control vulnerability in ArcSight ESM and…
• CVE-2017-13989An improper access control vulnerability in ArcSight ESM and…
• CVE-2017-13990An information leakage vulnerability in ArcSight ESM and Arc…
• CVE-2017-13991An information leakage vulnerability in ArcSight ESM and Arc…
• CVE-2017-13992An Insufficient Entropy issue was discovered in LOYTEC LVIS-…
• CVE-2017-13994A Cross-site Scripting issue was discovered in LOYTEC LVIS-3…
• CVE-2017-13995An Improper Authentication issue was discovered in iniNet So…
• CVE-2017-13996A Relative Path Traversal issue was discovered in LOYTEC LVI…
• CVE-2017-13997A Missing Authentication for Critical Function issue was dis…
• CVE-2017-13998An Insufficiently Protected Credentials issue was discovered…
• CVE-2017-13999A Stack-based Buffer Overflow issue was discovered in WECON …