Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse (1) DVBSKNLANG101.dll or (2) DvZediTermSrvInfo004.dll file in the current working directory, as demonstrated by a directory that contains a .dmt, .adl, .c02, .dof, or .jrf file. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DATEV Grundpaket Basis 多个不安全搜索路径漏洞
Vulnerability Description
DateV是德国的一家软件公司，产品主要为财务、税务、咨询类软件。 DATEV Grundpaket Basis CD23.20版本中的DMTGUI2.EXE和DvInesLogFileViewer.Exe组件中存在多个不安全搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录（如包含.dmt、.adl、.c02、.dof或.jrf文件的目录）下的Trojan木马(1)DVBSKNLANG101.dll或(2)DvZediTermSrvInfo004.dll文件，获取特权。
CVSS Information
N/A
Vulnerability Type
N/A