CVE-2017-2193: Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to ga...

Security readout for executives and security teams

CVE-2017-2193 affects the installer for Tera Term 4.94 and earlier. If the installer loads a malicious DLL from an unsafe search location, an attacker could gain privileges on the system. The main business concern is endpoint compromise during software installation, especially where old installers are retained or run from shared locations. Exposure is most likely where organizations still store, distribute, or execute Tera Term installer versions 4.94 and earlier. Installed Tera Term runtime exposure is not established by the provided sources; the described issue is in the installer. Treat this as a targeted hygiene and software-supply cleanup item, not an emergency internet-facing exposure. Prioritize removal of old installers from enterprise distribution paths and validate trusted deployment practices. Mitigation focus: Remove Tera Term 4.94 and earlier installers from software shares and endpoint caches.; Check TeraTerm Project or JVN guidance for corrected installer availability.; Distribute Tera Term only from trusted internal software management systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.