CVE-2017-9661

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of arbitrary code.

• CWE-427

• http://www.securityfocus.com/bid/100263Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100263Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-01Mitigation, Third Party Advisory, US Government Resource

Published

Aug 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9655A Cross-Site Scripting issue was discovered in OSIsoft PI In…
• CVE-2017-9656The backend database of the Philips DoseWise Portal applicat…
• CVE-2017-9657Under specific 802.11 network conditions, a partial re-assoc…
• CVE-2017-9658Certain 802.11 network management messages have been determi…
• CVE-2017-9659A Stack-Based Buffer Overflow issue was discovered in Fuji E…
• CVE-2017-9660A Heap-Based Buffer Overflow was discovered in Fuji Electric…
• CVE-2017-9662An Improper Privilege Management issue was discovered in Fuj…
• CVE-2017-9663An Cleartext Storage of Sensitive Information issue was disc…
• CVE-2017-9664In ABB SREA-01 revisions A, B, C: application versions up to…
• CVE-2017-9668In admin\addgroup.php in CMS Made Simple 2.1.6, when adding …
• CVE-2017-9669A heap overflow in apk (Alpine Linux's package manager) allo…
• CVE-2017-9670An uninitialized stack variable vulnerability in load_tic_se…