CVE-2017-2209
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
50.1%
Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| santeikohyo | installer_of_houkokusyo_sakusei_shien_tool | 2.0 | cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:2.0:*:*:*:*:*:*:* |
| santeikohyo | installer_of_houkokusyo_sakusei_shien_tool | 3.02 | cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:3.02:*:*:*:*:*:*:* |
| santeikohyo | installer_of_houkokusyo_sakusei_shien_tool | 3.03 | cpe:2.3:a:santeikohyo:installer_of_houkokusyo_sakusei_shien_tool:3.03:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
50.1%