CVE-2017-5170

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. The attacker needs to have administrative access to the default install location in order to plant the insecure DLL. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.

• CWE-427
• CWE-427

• http://www.securityfocus.com/bid/100208Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-02Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100208Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-02Mitigation, Third Party Advisory, US Government Resource

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5164An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5165An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5166An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5167An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5168An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5169An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5173An Improper Neutralization of Special Elements (in an OS com…9.8
• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Con…
• CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Control…
• CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server…