CVE-2017-15309
UnknownEPSS 0.98%
Last modified
CVE-2017-15309 is a vulnerability of currently unknown severity. Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.. EPSS estimates a 0.98% chance of exploitation in the next 30 days.
Description
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ireader | < 8.0.2.301 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-15309?
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.
How severe is CVE-2017-15309?
Severity scoring for CVE-2017-15309 is pending analysis. The EPSS model estimates a 0.98% probability of exploitation in the next 30 days.
How do I fix CVE-2017-15309?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-15303In CPUID CPU-Z before 1.43, there is an arbitrary memory wri…
- CVE-2017-15304/bin/login.php in the Web Panel on the Airtame HDMI dongle w…
- CVE-2017-15305XSS exists in NexusPHP 1.5 via the keyword parameter to mess…
- CVE-2017-15306The kvm_vm_ioctl_check_extension function in arch/powerpc/kv…
- CVE-2017-15307Huawei Honor 8 smartphone with software versions earlier tha…
- CVE-2017-15308Huawei iReader app before 8.0.2.301 has an input validation …
- CVE-2017-1531IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable…
- CVE-2017-15310Huawei iReader app before 8.0.2.301 has an arbitrary file de…
- CVE-2017-15311The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9…
- CVE-2017-15312Huawei SmartCare V200R003C10 has a stored XSS (cross-site sc…
- CVE-2017-15313Huawei SmartCare V200R003C10 has a CSV injection vulnerabili…
- CVE-2017-15314Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C…
Are you affected by CVE-2017-15309?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST