CVE-2017-2208

2017-07-0713:00:00

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

34.5%

JSON

Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

CNA Affected

[
  {
    "product": "Installer of electronic tendering and bid opening system",
    "vendor": "Acquisition, Technology & Logistics Agency",
    "versions": [
      {
        "status": "affected",
        "version": "available prior to June 12, 2017"
      }
    ]
  }
]

References

www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html

jvn.jp/en/jp/JVN27198823/index.html

0.001 Low

EPSS

Percentile

34.5%

JSON

Related for CVELIST:CVE-2017-2208