Cimon CmnView DLL Hijacking Vulnerability

An attacker could execute arbitrary code on workstations running CmnView, potentially compromising engineering systems or operator workstations used to manage industrial processes.

This affects organizations running CmnView for HMI, SCADA, or engineering workstation functions. Particularly relevant for electric utilities, water authorities, and manufacturing facilities that use CmnView for process monitoring or control system engineering.

An attacker would need to place a malicious DLL in a directory where CmnView searches for libraries during startup. When CmnView launches, it loads the attacker's DLL instead of the legitimate library, executing arbitrary code with the privileges of the user running CmnView.