PT-2017-14990 · Liveqos · Superbeam

Publicado 2017-12-19 · Atualizado 2020-02-04 · CVE-2017-17763

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SuperBeam versions prior to 4.1.4

Description The issue concerns the lack of HTTPS or any integrity-protection mechanism for file transfer when using the LAN or WiFi Direct Share feature. This makes it easier for remote attackers to send crafted files. For example, it can be used for APK injection.

Recommendations For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the LAN or WiFi Direct Share feature until a patch is applied. Restrict access to the file transfer functionality to minimize the risk of exploitation.

Exploit

Correção

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2017-17763

Produtos afetados

Superbeam

Referências · 3

• 🔥 https://thinktanksec.github.io · Exploit
• https://osv.dev/vulnerability/CVE-2017-17763 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17763 · Nota de Segurança