Lucene search
K

Bookeen Notea BK_R_1.0.5_20210608 Directory Traversal

🗓️ 11 May 2022 00:00:00Reported by Clement MailliouxType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 215 Views

Bookeen Notea BK_R_1.0.5_20210608 Directory Traversal vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Bookeen Notea - Directory Traversal Vulnerability
11 May 202200:00
zdt
Circl
CVE-2021-45783
5 May 202214:36
circl
CNNVD
Bookeen Notea 路径遍历漏洞
5 May 202200:00
cnnvd
CVE
CVE-2021-45783
5 May 202210:22
cve
Cvelist
CVE-2021-45783
5 May 202210:22
cvelist
EUVD
EUVD-2021-32501
3 Oct 202520:07
euvd
NVD
CVE-2021-45783
5 May 202211:15
nvd
OSV
CVE-2021-45783
5 May 202211:15
osv
Prion
Directory traversal
5 May 202211:15
prion
RedhatCVE
CVE-2021-45783
22 May 202521:08
redhatcve
Rows per page
`# Exploit Title: Bookeen Notea - Directory Traversal  
# Date: December 2021  
# Exploit Author: Clement MAILLIOUX  
# Vendor Homepage: https://bookeen.com/  
# Software Link: N/A  
# Version: BK_R_1.0.5_20210608  
# Tested on: Bookeen Notea (Android 8.1)  
# CVE : CVE 2021-45783  
  
# The affected version of the Bookeen Notea System Update is prone to directory traversal vulnerability related to its note Export function.  
# The vulnerability can be triggered like so :   
# - Create a note or use an existing note on the device  
# - rename this note ../../../../../../  
# - keep touching the note until a menu appears  
# - touch to select "export"  
# - touch "View"  
  
# Now you can access and explore the device filesystem.  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 May 2022 00:00Current
4.9Medium risk
Vulners AI Score4.9
EPSS0.03496
215