CVE-2017-9646: Solarcontrols Heating Control Downloader

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file.

Affected products

• Solarcontrols Heating Control Downloader: up to and including 1.0.1.15

Published 2017-08-14. Last modified 2026-06-17.