Untrusted Search Path Vulnerability in Shogyo Touki Denshi Ninsho Software by Shogyo Touki
CVE-2017-2177

8.8HIGH

Key Information:

Vendor

Ministry Of Justice

Status
Installer Of Shogyo Touki Denshi Ninsho Software
Vendor
CVE Published:
9 June 2017

What is CVE-2017-2177?

The Installer of Shogyo Touki Denshi Ninsho Software versions 1.7 and earlier exhibits an untrusted search path vulnerability that allows attackers to exploit the system. By placing a malicious DLL in a directory that is searched by the installer, an attacker can execute code with elevated privileges, thus gaining unauthorized access to system resources. This security risk highlights the importance of secure coding practices and proper validation of file paths.

Affected Version(s)

Installer of Shogyo Touki Denshi Ninsho Software Ver1.7 and earlier

References

http://www.moj.go.jp/MINJI/minji06_00027.html
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN92422409/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.