Lucene search
K

Bookeen Notea - Directory Traversal Vulnerability

🗓️ 11 May 2022 00:00:00Reported by Clement MAILLIOUXType 
zdt
 zdt
🔗 0day.today👁 134 Views

Bookeen Notea Directory Traversal Vulnerability, CVE 2021-4578

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2021-45783
5 May 202214:36
circl
CNNVD
Bookeen Notea 路径遍历漏洞
5 May 202200:00
cnnvd
CVE
CVE-2021-45783
5 May 202210:22
cve
Cvelist
CVE-2021-45783
5 May 202210:22
cvelist
EUVD
EUVD-2021-32501
3 Oct 202520:07
euvd
NVD
CVE-2021-45783
5 May 202211:15
nvd
OSV
CVE-2021-45783
5 May 202211:15
osv
Packet Storm
Bookeen Notea BK_R_1.0.5_20210608 Directory Traversal
11 May 202200:00
packetstorm
Prion
Directory traversal
5 May 202211:15
prion
RedhatCVE
CVE-2021-45783
22 May 202521:08
redhatcve
Rows per page
# Exploit Title: Bookeen Notea - Directory Traversal
# Exploit Author: Clement MAILLIOUX
# Vendor Homepage: https://bookeen.com/
# Software Link: N/A
# Version: BK_R_1.0.5_20210608
# Tested on: Bookeen Notea (Android 8.1)
# CVE : CVE 2021-45783

# The affected version of the Bookeen Notea System Update is prone to directory traversal vulnerability related to its note Export function.
# The vulnerability can be triggered like so : 
# - Create a note or use an existing note on the device
# - rename this note ../../../../../../
# - keep touching the note until a menu appears
# - touch to select "export"
# - touch "View"

# Now you can access and explore the device filesystem.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 May 2022 00:00Current
4.8Medium risk
Vulners AI Score4.8
CVSS 22.1
CVSS 3.14.6
EPSS0.03496
134