CVEvulnerability

CVE-2017-2149

8.8 HIGH Published 2017-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-426

Description

Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

• toshiba flashair (<= 1.00.03) • toshiba flashair (<= 1.00.04) • toshiba flashair (<= 1.00.06) • toshiba flashair (<= 1.02) • toshiba flashair (<= 2.00.03) • toshiba flashair (<= 3.00.01) • toshiba flashair (<= 3.0.2)

Related

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References