Skip to content
CVE Tracker
Back

CVE-2017-13993

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior…

High7.8EPSS 1.8%
Published
Updated
Reserved
Assigned by
icscert

Description

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. This vulnerability does not affect the connected blood glucose monitor and would not impact delivery of therapy to the patient.

Scores

CVSS scores of CVE-2017-13993, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
1.8% · top 22% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • i-SENS, Inc. SmartLog Diabetes Management Software

    • affected i-SENS, Inc. SmartLog Diabetes Management Software

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .