多款Toshiba内存卡安装程序安全漏洞 CVE-2017-2149 CNNVD-201704-965

9.3 AV AC AU C I A
发布: 2017-04-28
修订: 2019-10-03

Toshiba SDHC和SDXC都是日本东芝(Toshiba)公司的存储卡产品。Toshiba SDHC/SDXC Memory Card with embedded NFC functionality是一款具有NFC功能的存储卡。Toshiba SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool是其中的一个软件更新工具;SDHC Memory Card with embedded wireless LAN functionality是一款具有无线局域网功能的存储卡,SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool是其中一个的软件更新工具;SDHC Memory Card with embedded TransferJet functionality是一款具有TransferJet功能的存储卡,SDHC Memory Card with embedded TransferJet functionality Configuration Software是其中的一个配置工具软件。 多款Toshiba内存卡安装程序中存在不可信搜索路径漏洞。远程攻击者可利用该漏洞获取权限。以下版本和产品受到影响:Toshiba SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03及之前的版本;SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software V3.0.2及之前的版本;SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series<W-03>) V3.00.01版本;SDHC Memory Card with embedded wireless LAN...

0%
当前有1条漏洞利用/PoC
当前有1条受影响产品信息