CVE-2016-10157 - CVE House
Back to Database
Status published Critical CVE-2016-10157

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries...

Vulnerability Description

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-10157

Credits & Attribution

No credits recorded in the NVD database.

References

More from akamai

View All →
CVE-2021-40683
In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x...
High 7.8
CVE-2019-18847
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior...
Critical 9.8
CVE-2019-11011
Akamai CloudTest before 58.30 allows remote code execution....
Critical 9.8
CVE-2008-1770
CRLF injection vulnerability in Akamai Download Manager ActiveX control before...
Critical 9.3

Affected Vendor

Affected Software

netsession
Vulnerable Versions:
1.9.3.1

Timeline

Official Publish: January 23rd, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.