CVE-2017-2149

Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

• CWE-426

• http://jvn.jp/en/jp/JVN05340816/index.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97697Third Party Advisory, VDB Entry
• http://www.toshiba-personalstorage.net/news/20170414.htmVendor Advisory
• http://jvn.jp/en/jp/JVN05340816/index.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97697Third Party Advisory, VDB Entry
• http://www.toshiba-personalstorage.net/news/20170414.htmVendor Advisory

Published

Apr 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2143CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart M…
• CVE-2017-2144Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock a…
• CVE-2017-2145Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2…
• CVE-2017-2146Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to…
• CVE-2017-2147Cross-site scripting vulnerability in WP Statistics version …
• CVE-2017-2148Cross-site scripting vulnerability in WN-AC1167GR firmware v…
• CVE-2017-2150Directory traversal vulnerability in Booking Calendar versio…
• CVE-2017-2151Cross-site scripting vulnerability in Booking Calendar versi…
• CVE-2017-2152WNC01WH firmware 1.0.0.9 and earlier allows authenticated at…
• CVE-2017-2153SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 …
• CVE-2017-2154Untrusted search path vulnerability in Hanako 2017, Hanako 2…
• CVE-2017-2155Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier,…