CVE-2017-2286Not scoredCWE-427

CVE-2017-2286: Sony Corporation NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S) vulnerability

Sony Corporation · NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S)

Affected: Sony Corporation NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S) · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.1%probability of exploitation in the next 30 days

65th percentile

050100

Higher than 65% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products5

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Sony Corporation · NFC Port Software (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S)Version 5.5.0.6 and earlier
Sony Corporation · NFC Port Software (for RC-S320, RC-S310/J1C, RC-S310/ED4C)Version 5.3.6.7 and earlier
Sony Corporation · PC/SC Activator for Type BVer.1.2.1.0 and earlier
Sony Corporation · SFCard Viewer 2Ver.2.5.0.0 and earlier
Sony Corporation · NFC Net InstallerVer.1.1.0.0 and earlier

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Uncontrolled Search Path · File and Path Handling
Vendor: Sony Corporation
Published: August 2017
Band: Possible (1 to 10%), August 2017

CoverageNo articles yet

No CyberSIXT article names CVE-2017-2286 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.