erwin Data Modeler: Vulnerability- Microsoft Visual C++ Redistributable 2015-2022 x64 14.34.31938.0 (4383078)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

erwin Data Modeler: Vulnerability- Microsoft Visual C++ Redistributable 2015-2022 x64 14.34.31938.0
Description

Category: erwin Data Modeler

A vulnerability has been identified in Microsoft Visual C++ Redistributable 2015-2022 x64 14.34.31938.0 affecting Erwin Data Modeler
Cause

The Vulnerability is CVE‑2024‑43590

Title: Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
Severity: High (CVSS v3.1: 7.8)
Type: Elevation of Privilege (EoP)

The vulnerability exists in the installer, not in the runtime DLLs themselves.

It allows a local, low‑privileged attacker to gain administrative privileges by exploiting how the installer loads DLLs from writable paths (DLL hijacking / sideloading).

No user interaction is required once the installer is executed with elevated rights.
Resolution

Recommended Mitigation (Please consult with your internal IT team as this is 3rd party Microsoft feature.)
Upgrade to a patched version
Microsoft confirms the issue is resolved by installing:

Microsoft Visual C++ Redistributable 2015–2022 (x64)
Version ≥ 14.50.35719

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title