Path Traversal Vulnerability in Huawei iReader App
CVE-2017-15309

7.1HIGH

Key Information:

Vendor

McAfee
Status
Ireader
Vendor
CVE Published:
22 December 2017

What is CVE-2017-15309?

The Huawei iReader app versions prior to 8.0.2.301 contain a path traversal vulnerability, which arises from inadequate validation of file storage paths. This flaw could allow an attacker to exploit the app's file handling mechanism, leading to the potential storage of malicious files in an arbitrary directory, thereby compromising the integrity and security of user data and device functionality.

Affected Version(s)

iReader before 8.0.2.301

References

http://www.huawei.com/en/psirt/security-advisories/2017/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.