Vulnerability-Lookup

VAR-201704-0898

Vulnerability from variot - Updated: 2025-04-20 23:25

Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Multiple installers of Toshiba memory card related software contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.Arbitrary code may be executed with the privilege of the user invoking the installer. Toshiba SDHC and SDXC are both memory cards from Toshiba Corporation of Japan. A remote attacker can exploit this vulnerability to gain access. A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201704-0898",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "2.00.03"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "3.00.01"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "1.00.06"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "1.02"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "3.0.2"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "1.00.04"
      },
      {
        "model": "flashair",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "toshiba",
        "version": "1.00.03"
      },
      {
        "model": "sdhc memory card with embedded transferjet functionality configuration software",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "v1.02"
      },
      {
        "model": "sdhc memory card with embedded transferjet functionality software update tool",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "v1.00.06"
      },
      {
        "model": "sdhc memory card with embedded wireless lan functionality flashair configuration software",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "v3.0.2"
      },
      {
        "model": "sdhc memory card with embedded wireless lan functionality flashair software update tool",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "(sd-wb/wl series) v1.00.04"
      },
      {
        "model": "sdhc memory card with embedded wireless lan functionality flashair software update tool",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "(sd-wd/wc series\u003cw-02\u003e) v2.00.03"
      },
      {
        "model": "sdhc memory card with embedded wireless lan functionality flashair software update tool",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "(sd-we series\u003cw-03\u003e) v3.00.01"
      },
      {
        "model": "sdhc/sdxc memory card with embedded nfc functionality software update tool",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "toshiba",
        "version": "v1.00.03"
      },
      {
        "model": "sdhc memory card",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "\u003c=v3.0.2"
      },
      {
        "model": "sdhc memory card",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "3.00.01"
      },
      {
        "model": "sdhc memory card",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "\u003c=v2.00.03"
      },
      {
        "model": "sdhc memory card",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "\u003c=v1.00.04"
      },
      {
        "model": "sdhc memory card",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "\u003c=v1.02"
      },
      {
        "model": "sdhc memory card",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "\u003c=v1.00.06"
      },
      {
        "model": "sdhc/sdxc memory card",
        "scope": null,
        "trust": 0.6,
        "vendor": "toshiba",
        "version": null
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "3.0.2"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "2.00.03"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "1.00.03"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "1.00.04"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "1.00.06"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "3.00.01"
      },
      {
        "model": "flashair",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "toshiba",
        "version": "1.02"
      },
      {
        "model": "sdxc memory card with embedded nfc functionality software update",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "1.0.3"
      },
      {
        "model": "sdxc memory card with embedded nfc functionality software update",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "0"
      },
      {
        "model": "sdhc memory card flashairtm software update tool",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "3.0.1"
      },
      {
        "model": "sdhc memory card flashairtm software update tool",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "0"
      },
      {
        "model": "sdhc memory card flashairtm configuration software",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "3.0.2"
      },
      {
        "model": "sdhc memory card flashairtm configuration software",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "0"
      },
      {
        "model": "sdhc memory card",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "1.0.3"
      },
      {
        "model": "sdhc memory card",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "toshiba",
        "version": "0"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "BID",
        "id": "97697"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:toshiba:sdhc_memory_card_with_transferjet_setting_software",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:toshiba:sdhc_memory_card_with_transferjet_firmware_updatetool",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:toshiba:wlan_sdhc_memory_card_flashair_setting_software",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:toshiba:wlan_sdhc_memory_card_flashair_setting_software_updatetool",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:toshiba:nfc_sdhc_%2F_sdxc_memory_card_software_updatetool",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Yuji Tounai of NTT Communications Corporation.",
    "sources": [
      {
        "db": "BID",
        "id": "97697"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2017-2149",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2017-2149",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.0,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Network",
            "authentication": "None",
            "author": "IPA",
            "availabilityImpact": "Partial",
            "baseScore": 6.8,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "JVNDB-2017-000069",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Medium",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CNVD-2017-06938",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2017-2149",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Local",
            "author": "IPA",
            "availabilityImpact": "High",
            "baseScore": 7.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2017-000069",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2017-2149",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "IPA",
            "id": "JVNDB-2017-000069",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2017-06938",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201704-965",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series\u003cW-03\u003e) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series\u003cW-02\u003e) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Multiple installers of Toshiba memory card related software contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.Arbitrary code may be executed with the privilege of the user invoking the installer. Toshiba SDHC and SDXC are both memory cards from Toshiba Corporation of Japan. A remote attacker can exploit this vulnerability to gain access. \nA remote attacker can leverage this issue to execute arbitrary code in the context of the affected application",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "BID",
        "id": "97697"
      }
    ],
    "trust": 2.97
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "JVN",
        "id": "JVN05340816",
        "trust": 3.3
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149",
        "trust": 3.3
      },
      {
        "db": "BID",
        "id": "97697",
        "trust": 2.5
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "BID",
        "id": "97697"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "id": "VAR-201704-0898",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      }
    ],
    "trust": 1.5375
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      }
    ]
  },
  "last_update_date": "2025-04-20T23:25:04.102000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Toshiba Corporation website",
        "trust": 0.8,
        "url": "http://www.toshiba-personalstorage.net/news/20170414.htm"
      },
      {
        "title": "Patches for multiple Toshiba memory card installers that are not trusted for search path vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/93907"
      },
      {
        "title": "Multiple Toshiba Repair measures for memory card installer security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=69714"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-426",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-Other",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.3,
        "url": "http://jvn.jp/en/jp/jvn05340816/index.html"
      },
      {
        "trust": 2.2,
        "url": "http://www.securityfocus.com/bid/97697"
      },
      {
        "trust": 1.6,
        "url": "http://www.toshiba-personalstorage.net/news/20170414.htm"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2149"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-2149"
      },
      {
        "trust": 0.3,
        "url": "http://blog.metasploit.com/2010/08/exploiting-dll-hijacking-flaws.html"
      },
      {
        "trust": 0.3,
        "url": "http://blogs.technet.com/b/srd/archive/2010/08/23/more-information-about-dll-preloading-remote-attack-vector.aspx"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "BID",
        "id": "97697"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "db": "BID",
        "id": "97697"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-05-18T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "date": "2017-04-14T00:00:00",
        "db": "BID",
        "id": "97697"
      },
      {
        "date": "2017-04-14T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "date": "2017-04-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "date": "2017-04-28T16:59:01.917000",
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-05-18T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2017-06938"
      },
      {
        "date": "2017-04-18T00:07:00",
        "db": "BID",
        "id": "97697"
      },
      {
        "date": "2017-12-21T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      },
      {
        "date": "2019-10-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      },
      {
        "date": "2025-04-20T01:37:25.860000",
        "db": "NVD",
        "id": "CVE-2017-2149"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-000069"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "code problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201704-965"
      }
    ],
    "trust": 0.6
  }
}

CVE-2017-2149 (GCVE-0-2017-2149)

Vulnerability from cvelistv5 – Published: 2017-04-28 16:00 – Updated: 2024-08-05 13:48

Summary

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert CNA under the jpcert root

CNA scorecard C 64/100 over 184 records in the last 180 days details

References

3 references

URL	Tags
http://jvn.jp/en/jp/JVN05340816/index.html	third-party-advisoryx_refsource_JVN
http://www.toshiba-personalstorage.net/news/20170…	x_refsource_MISC
http://www.securityfocus.com/bid/97697	vdb-entryx_refsource_BID

Impacted products

7 products

Vendor	Product	Version
Toshiba Corporation	Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool	Affected: V1.00.03 and earlier
Toshiba Corporation	Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software	Affected: V3.0.2 and earlier
Toshiba Corporation	Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series<W-03>)	Affected: V3.00.01
Toshiba Corporation	Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WD/WC series<W-02>)	Affected: V2.00.03 and earlier
Toshiba Corporation	Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WB/WL series)	Affected: V1.00.04 and earlier
Toshiba Corporation	Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software	Affected: V1.02 and earlier
Toshiba Corporation	Installer for SDHC Memory Card with embedded TransferJetTM functionality Software Update tool	Affected: V1.00.06 and earlier

Date Public

2017-04-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:48:03.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#05340816",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN05340816/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.toshiba-personalstorage.net/news/20170414.htm"
          },
          {
            "name": "97697",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97697"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V1.00.03 and earlier"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V3.0.2 and earlier"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series\u003cW-03\u003e)",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V3.00.01"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WD/WC series\u003cW-02\u003e)",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V2.00.03 and earlier"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WB/WL series)",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V1.00.04 and earlier"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V1.02 and earlier"
            }
          ]
        },
        {
          "product": "Installer for SDHC Memory Card with embedded TransferJetTM functionality Software Update tool",
          "vendor": "Toshiba Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "V1.00.06 and earlier"
            }
          ]
        }
      ],
      "datePublic": "2017-04-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series\u003cW-03\u003e) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series\u003cW-02\u003e) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-05-01T09:57:02.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#05340816",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN05340816/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.toshiba-personalstorage.net/news/20170414.htm"
        },
        {
          "name": "97697",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97697"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2017-2149",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V1.00.03 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Configuration Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V3.0.2 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WE series\u003cW-03\u003e)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V3.00.01"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WD/WC series\u003cW-02\u003e)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V2.00.03 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded wireless LAN functionality FlashAirTM Software Update tool (SD-WB/WL series)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V1.00.04 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V1.02 and earlier"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Installer for SDHC Memory Card with embedded TransferJetTM functionality Software Update tool",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "V1.00.06 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Toshiba Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series\u003cW-03\u003e) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series\u003cW-02\u003e) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#05340816",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN05340816/index.html"
            },
            {
              "name": "http://www.toshiba-personalstorage.net/news/20170414.htm",
              "refsource": "MISC",
              "url": "http://www.toshiba-personalstorage.net/news/20170414.htm"
            },
            {
              "name": "97697",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97697"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2017-2149",
    "datePublished": "2017-04-28T16:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T13:48:03.535Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted