Lucene search

K
nvd[email protected]NVD:CVE-2017-2286
HistoryAug 02, 2017 - 4:29 p.m.

CVE-2017-2286

2017-08-0216:29:00
CWE-427
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.2%

Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

NVD
Node
sonyrc-s310Match-
OR
sonyrc-s320Match-
OR
sonyrc-s330Match-
OR
sonyrc-s370Match-
OR
sonyrc-s380Match-
OR
sonyrc-s380\/sMatch-
AND
sonynfc_port_firmwareRange5.5.0.6
Node
sonyrc-s310\/ed4cMatch-
OR
sonyrc-s310\/j1cMatch-
OR
sonyrc-s320Match-
AND
sonynfc_port_firmwareRange5.3.6.7
Node
sonypc\/sc_activator_for_type_bRange1.2.1.0
Node
sonysfcard_viewer_2Match2.5.0.0
Node
sonynfc_net_installerRange1.1.0.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.2%

Related for NVD:CVE-2017-2286