← back
CVE-2017-15309

CVE-2017-15309

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.