CVE-2017-5176

A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges.

• CWE-427
• CWE-427

• http://www.securityfocus.com/bid/97000Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-047-01Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/97000Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-047-01Patch, Third Party Advisory, US Government Resource

Published

May 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5168An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5169An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5170An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-5173An Improper Neutralization of Special Elements (in an OS com…9.8
• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Control…
• CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server…
• CVE-2017-5179Cross-site scripting (XSS) vulnerability in Tenable Nessus b…
• CVE-2017-5180Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LT…
• CVE-2017-5181Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-5182Remote Manager in Open Enterprise Server (OES) allows unauth…