Untrusted Search Path Vulnerability in NFC Port Software by Vendor Name
CVE-2017-2287

7.8HIGH

Key Information:

Vendor

Sony Corporation

Status
Nfc Port Software Remover
Vendor
CVE Published:
2 August 2017

What is CVE-2017-2287?

The vulnerability in NFC Port Software allows attackers to exploit an untrusted search path, enabling privilege escalation via a Trojan horse DLL found in an unspecified directory. This issue, affecting version 1.3.0.1 and earlier, makes systems running this software susceptible to unauthorized access and control. Regular updates and security measures are essential to mitigate this risk.

Affected Version(s)

NFC Port Software remover Ver.1.3.0.1 and earlier

References

https://jvn.jp/en/jp/JVN33797604/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.