CVE-2017-2286

🗓️ 02 Aug 2017 16:00:00Reported by jpcertType

Untrusted search path vulnerability in NFC Port Software v5.5.0.6 and earlie

Reporter	Title	Published	Views	Family All 8
CNVD	Multiple Sony products untrustworthy search path vulnerability	27 Oct 201700:00	–	cnvd
Cvelist	CVE-2017-2286	2 Aug 201716:00	–	cvelist
EUVD	EUVD-2017-11469	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#16136413: Installers of Sony PaSoRi related software may insecurely load Dynamic Link Libraries	27 Jul 201700:00	–	jvn
Japan Vulnerability Notes	Installers of Sony PaSoRi related software may insecurely load Dynamic Link Libraries	27 Jul 201706:38	–	jvn
NVD	CVE-2017-2286	2 Aug 201716:29	–	nvd
OSV	CVE-2017-2286	2 Aug 201716:29	–	osv
Prion	Design/Logic Flaw	2 Aug 201716:29	–	prion

NVD

Vulners

Node

sony nfc_port_firmwareRange≤5.5.0.6

AND

sony rc-s310Match-

sony rc-s320Match-

sony rc-s330Match-

sony rc-s370Match-

sony rc-s380Match-

sony rc-s380/sMatch-

Node

sony nfc_port_firmwareRange≤5.3.6.7

AND

sony rc-s310/ed4cMatch-

sony rc-s310/j1cMatch-

sony rc-s320Match-

Node

sony pc/sc_activator_for_type_bRange≤1.2.1.0

Node

sony sfcard_viewer_2Match2.5.0.0

Node

sony nfc_net_installerRange≤1.1.0.0

[
  {
    "product": "NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S)",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.5.0.6 and earlier"
      }
    ]
  },
  {
    "product": "NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C)",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Version 5.3.6.7 and earlier"
      }
    ]
  },
  {
    "product": "PC/SC Activator for Type B",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.1.2.1.0 and earlier"
      }
    ]
  },
  {
    "product": "SFCard Viewer 2",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.2.5.0.0 and earlier"
      }
    ]
  },
  {
    "product": "NFC Net Installer",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.1.1.0.0 and earlier"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN16136413/index.html

13 May 2026 00:24Current

7.7High risk

Vulners AI Score7.7

CVSS 37.8

CVSS 29.3

EPSS0.00136

CWE-427