CVE-2017-2178: Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available p...

Security readout for executives and security teams

This CVE affects an installer for an electronic tendering and bid opening system distributed before May 25, 2017. If run in unsafe conditions, the installer could load a malicious DLL placed by an attacker, potentially giving that attacker higher privileges. Public data does not provide CVSS scoring, broad impact details, or confirmed exploitation. Exposure is likely limited to environments that retained or executed the affected installer version available before May 25, 2017. Current production services may not be affected unless old installer packages remain in deployment shares, archives, endpoint software caches, or procurement support workflows. Treat this as a targeted legacy software hygiene issue, not an internet-scale emergency. Prioritize if the organization uses the named tendering system, maintains Japanese defense procurement workflows, or stores old installer packages in shared locations. Mitigation focus: Check vendor guidance and use installer versions available on or after May 25, 2017.; Remove pre-May 25, 2017 installer copies from shares, archives, and deployment tooling.; Restrict execution of installers from untrusted or user-writable directories..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.