CVE-2017-2154
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Una vulnerabilidad de ruta (path) de búsqueda no confiable en Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Estándar], Just Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 versión de prueba, permite a los atacantes remotos alcanzar privilegios por medio de un archivo DLL de tipo caballo de troya en un directorio no especificado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-12-01 CVE Reserved
- 2017-04-28 CVE Published
- 2023-09-13 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/jp/JVN54268888/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.justsystems.com/jp/info/js17002.html | 2017-05-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Justsystems Search vendor "Justsystems" | Hanako Search vendor "Justsystems" for product "Hanako" | 2015 Search vendor "Justsystems" for product "Hanako" and version "2015" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Hanako Search vendor "Justsystems" for product "Hanako" | 2016 Search vendor "Justsystems" for product "Hanako" and version "2016" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Hanako Search vendor "Justsystems" for product "Hanako" | 2017 Search vendor "Justsystems" for product "Hanako" and version "2017" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Hanako Search vendor "Justsystems" for product "Hanako" | 2017 Search vendor "Justsystems" for product "Hanako" and version "2017" | trial_version |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Hanako Police Search vendor "Justsystems" for product "Hanako Police" | 5 Search vendor "Justsystems" for product "Hanako Police" and version "5" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Hanako Pro Search vendor "Justsystems" for product "Hanako Pro" | 3 Search vendor "Justsystems" for product "Hanako Pro" and version "3" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Frontier Search vendor "Justsystems" for product "Just Frontier" | 3 Search vendor "Justsystems" for product "Just Frontier" and version "3" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Government Search vendor "Justsystems" for product "Just Government" | 3 Search vendor "Justsystems" for product "Just Government" and version "3" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Jump Class Search vendor "Justsystems" for product "Just Jump Class" | 2 Search vendor "Justsystems" for product "Just Jump Class" and version "2" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Office Search vendor "Justsystems" for product "Just Office" | 3 Search vendor "Justsystems" for product "Just Office" and version "3" | eco_print_pack |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Office Search vendor "Justsystems" for product "Just Office" | 3 Search vendor "Justsystems" for product "Just Office" and version "3" | standard |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Office Search vendor "Justsystems" for product "Just Office" | 3 Search vendor "Justsystems" for product "Just Office" and version "3" | tri-de_dataprotect_pack |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just Police Search vendor "Justsystems" for product "Just Police" | 3 Search vendor "Justsystems" for product "Just Police" and version "3" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just School Search vendor "Justsystems" for product "Just School" | 6 Search vendor "Justsystems" for product "Just School" and version "6" | - |
Affected
| ||||||
| Justsystems Search vendor "Justsystems" | Just School Search vendor "Justsystems" for product "Just School" | 6 Search vendor "Justsystems" for product "Just School" and version "6" | premium |
Affected
| ||||||