Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0990
Reference (s):
- https://ics-cert.us-cert.gov/advisories/ICSA-15-090-02