CVE-2024-57964
Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
- State
- Published
- Severity
- 7.3 High
- Published
- Feb 18, 2025
- Updated
- Feb 18, 2025
- Reserved
- Jan 29, 2025
Description
Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | Hitachi |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
HVAC Energy Saving ProgramHitachi |
|
References
- https://www.hitachi.com/hirt/hitachi-sec/2025/001.htmlvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.