CVE-2017-5234

HIGH 7.8CVE-2017-5234 · Published 02/03/2017 · updated 17/06/2026

In short

CVE-2017-5234 is a HIGH (CVSS 7.8) vulnerability affecting insight collector (rapid7).
Chance of exploitation in the next 30 days (EPSS): 0.91%, higher than 60.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
insight collector rapid7	`≤ 1.0.15`	No fix yet

Description

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

References

securityfocus.com/bid/96545 · Third Party Advisory
community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free