Untrusted Search Path Vulnerability in HYPER SBI by HYPER Corporation
CVE-2017-10885

7.8HIGH

Key Information:

Vendor

Sbi Securities Co.,ltd.

Status
Hyper Sbi
Vendor
CVE Published:
13 November 2017

What is CVE-2017-10885?

An untrusted search path vulnerability exists in HYPER SBI versions up to 2.2. This vulnerability could allow an attacker to exploit a Trojan horse DLL placed in an unspecified directory, potentially leading to privilege escalation. Proper safeguards against unauthorized DLLs should be enforced to mitigate the risk associated with this vulnerability.

Affected Version(s)

HYPER SBI Ver. 2.2 and earlier

References

http://jvn.jp/en/jp/JVN71284826/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.