CVE-2017-9646

An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.

• CWE-427

• http://www.securityfocus.com/bid/100261Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100261Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-02Mitigation, Third Party Advisory, US Government Resource

Published

Aug 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9638Mitsubishi E-Designer, Version 7.52 Build 344 contains six c…
• CVE-2017-9639An issue was discovered in Fuji Electric V-Server Version 3.…
• CVE-2017-9640A Path Traversal issue was discovered in Automated Logic Cor…
• CVE-2017-9641PI Coresight 2016 R2 contains a cross-site request forgery v…
• CVE-2017-9644An Unquoted Search Path or Element issue was discovered in A…
• CVE-2017-9645An Inadequate Encryption Strength issue was discovered in Mi…
• CVE-2017-9647A Stack-Based Buffer Overflow issue was discovered in the Co…
• CVE-2017-9648An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-9649A Use of Hard-Coded Cryptographic Key issue was discovered i…
• CVE-2017-9650An Unrestricted Upload of File with Dangerous Type issue was…
• CVE-2017-9653An Improper Authorization issue was discovered in OSIsoft PI…
• CVE-2017-9654The Philips DoseWise Portal web-based application versions 1…