Back to Database
Status published
High
CVE-2020-6654
DLL Hijacking
Vulnerability Description
A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-6654
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Eaton would like to thank Yongjun liu from Nsfocus security team
More from Eaton
View All →CVE-2025-67450
Due to insecure library loading in the Eaton UPS Companion...
High
7.8
CVE-2025-59890
Improper input sanitization in the file archives upload functionality of...
High
7.3
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software...
High
8.6
CVE-2025-59888
Improper quotation in search paths in the Eaton UPS Companion...
Medium
6.7
CVE-2025-59887
Improper authentication of library files in the Eaton UPS Companion...
High
8.6
Affected Vendor
Eaton
View all reports →Affected Software
9000x Programming and Configuration Software
Vulnerable Versions:
unspecified
Timeline
Official Publish:
September 30th, 2020
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK TTPs
T1574
Hijack Execution Flow
Persistence
T1574.001
DLL Search Order Hijacking
Privilege Escalation
T1547
Boot or Logon Autostart Execution
Persistence
T1036
Masquerading
Defense Evasion
T1059
Command and Scripting Interpreter
Execution
T1543
Create or Modify System Process
Persistence
T1569
System Services
Execution