CVE-2017-16690

CVE-2017-16690 describes a malicious DLL preload vulnerability affecting SAP Plant Connectivity versions 2.3 and 15.0, specifically within the NwSapSetup and Installation self-extracting programs. An attacker can place a malicious DLL with the same name as a legitimate system DLL in the executable's directory, causing the program to load and execute the malicious code instead of the intended system DLL. This vulnerability carries a CVSS v3 score of 7.8 (High), indicating a significant risk. It requires local access and user interaction (UI:R) to trick the user into executing the affected program from a compromised directory, but once triggered, it can lead to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). Despite its high severity, there is no evidence of active exploitation (KEV: No) and no public exploit code available (Metasploit, Nuclei, ExploitDB: None). Community discussion and media coverage are minimal, suggesting it has not garnered widespread attention from threat actors or researchers.