CNNVD-202601-1375 Information

CNNVD ID

CNNVD-202601-1375

CVE-2019-25268

  • CNNVD Published: 2026-01-08

Description (Chinese)

NREL BEopt是美国NREL组织的一个住宅建筑节能方案计算软件。 NREL BEopt 2.8.0.0版本存在代码问题漏洞,该漏洞源于不安全库加载,可能导致DLL劫持攻击。

Description (English)

NREL Beopt is a residential energy-saving programme computing software for NREL. There is a code gap in NREL BEOPt 2.8.0.0, which originates from an unsafe warehouse and could lead to a DLL hijacking attack.

Hazard Level

Low

Vulnerability Type

代码问题

Affected Vendor

NREL

Published

2026-01-08

Last Modified

2026-02-24

References

https://cxsecurity.com/issue/WLB-2019030108 https://exchange.xforce.ibmcloud.com/vulnerabilities/158065 https://packetstormsecurity.com/files/152043 https://beopt.nrel.gov/ https://web.archive.org/web/20190915095657/ https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5513.php

Share on: