Login Request a demo
Critical severity · published Jan 23, 2017
CVE-2016-10157
Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path
9.8
CVSS
2.3%
EPSS
No
On KEV
Description
Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netsession · Akamai
1.9.3.1 · source: NVD
Affected product
NE
Netsession
Akamai
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10157
www.securityfocus.com
http://www.securityfocus.com/bid/95995
Third Party Advisory
https://packetstormsecurity.com/files/140366/Akamai-NetSession-1.9.3.1-DLL-Hijacking.html