CVE-2017-15309
CVE-2017-15309
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Dec 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.
Affected products
Huawei Technologies Co., Ltd. · iReaderWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →