CVE-2026-5397 | BDVDB-2026-327185 Detail
OMRON SOCIAL SOLUTIONSPowerAttendant Standard Edition
Description#
It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Supply) management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is placed in the installation directory of this product, there is a possibility that the malicious DLL may be executed by exploiting the product’s behavior of loading missing DLLs from the same directory as the executable during service startup.
Impact#
CAPEC-471 Search Order Hijacking
Weaknesses#
- CWE-427 Uncontrolled Search Path Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.