Approved changes feed: RSS · Atom

cpe:2.3:a:omron_social_solutions_co.,_ltd.:powerattendant_standard_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOmron Social Solutions Co., Ltd. (a41f95cb-a896-55d1-98d1-92a803c4262e)
ProductPowerattendant Standard Edition (689f473f-c41b-5e6e-8c35-78041240aa7d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5397 vulnerable 2026-06-08 08:07:03.658607 Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application
HIGH (7.8)
It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Supply) management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is placed in the installation directory of this product, there is a possibility that the malicious DLL may be executed by exploiting the product’s behavior of loading missing DLLs from the same directory as the executable during service startup.
Published: 2026-04-15T04:11:29.716Z
Updated: 2026-04-15T16:13:26.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9818 vulnerable 2026-06-08 07:47:09.987311 Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application
MEDIUM (6.7)
A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contains spaces, there is a possibility that unauthorized files may be executed under the service privileges by using paths containing spaces.
Published: 2025-09-17T03:02:20.527Z
Updated: 2025-09-17T13:40:05.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.