Zucchetti FirmaCheck up to 1.3.15 openssl.cnf uncontrolled search path

Summaryinfo

A vulnerability was found in Zucchetti FirmaCheck up to 1.3.15 and classified as critical. Impacted is an unknown function of the file openssl.cnf. Such manipulation leads to uncontrolled search path. This vulnerability is documented as CVE-2026-41447. The attack needs to be performed locally. There is not any exploit available.

Detailsinfo

A vulnerability was found in Zucchetti FirmaCheck up to 1.3.15. It has been rated as critical. Affected by this issue is an unknown code of the file openssl.cnf. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. Using CWE to declare the problem leads to CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. Impacted is confidentiality, integrity, and availability. CVE summarizes:

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\Program Files (x86)\Common Files\SSL\ directory path. Attackers can write a malicious OpenSSL configuration file referencing an attacker-controlled DLL to achieve code execution at startup process privilege level when FirmaCheck.exe runs automatically at system startup.

The advisory is shared for download at zucchetti.it. This vulnerability is handled as CVE-2026-41447 since 04/20/2026. The exploitation is known to be difficult. The attack needs to be approached locally. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1574.

Upgrading to version 1.3.16 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Zucchetti

Name

• FirmaCheck

Version

• 1.3.0
• 1.3.1
• 1.3.2
• 1.3.3
• 1.3.4
• 1.3.5
• 1.3.6
• 1.3.7
• 1.3.8
• 1.3.9
• 1.3.10
• 1.3.11
• 1.3.12
• 1.3.13
• 1.3.14
• 1.3.15

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion