CVE-2017-2286: falha em Sony Corporation PC/SC Activator for Type B
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.1%
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Produtos afetados
Sony Corporation · NFC Net InstallerSony Corporation · NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S)Sony Corporation · NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C)Sony Corporation · PC/SC Activator for Type BSony Corporation · SFCard Viewer 2Referências
https://jvn.jp/en/jp/JVN16136413/index.html