CVE-2017-2161

Name: CVE-2017-2161
Creator: NVD / NIST
Published: 2017-05-22T16:29:00.56+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.45%

Last modified Jun 17, 2026

CVE-2017-2161 is a vulnerability of currently unknown severity. FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.

Description

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.

Metrics

EPSS Probability

0.45%

35.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-425

Affected Software

Vendor	Product	Versions
Toshiba	Flashair	<= 2.00.04
Toshiba	Flashair	<= 3.00.02

References

http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.htmlThird Party Advisory, VDB Entry
http://www.toshiba-personalstorage.net/news/20170516a.htmVendor Advisory
https://jvn.jp/en/jp/JVN46372675/index.htmlThird Party Advisory, VDB Entry
http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.htmlThird Party Advisory, VDB Entry
http://www.toshiba-personalstorage.net/news/20170516a.htmVendor Advisory
https://jvn.jp/en/jp/JVN46372675/index.htmlThird Party Advisory, VDB Entry

Timeline

Published: May 22, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-2161?

How severe is CVE-2017-2161?

Severity scoring for CVE-2017-2161 is pending analysis. The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.

How do I fix CVE-2017-2161?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-2161?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST