PT-2015-4176 · Speed · Speed Root Explorer+1

Ryohei Koike · Published 2015-02-24 · Updated 2015-02-25 · CVE-2014-9282

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Speed Root Explorer versions prior to 3.2 Speed Explorer versions prior to 2.2

Description The issue allows remote attackers to write to arbitrary files via a crafted filename, potentially leading to unauthorized data modification.

Recommendations For Speed Root Explorer versions prior to 3.2, update to version 3.2 or later. For Speed Explorer versions prior to 2.2, update to version 2.2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-9282

Affected Products

Speed Explorer

Speed Root Explorer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-9282 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000023 · Vendor Advisory
• http://jvn.jp/en/jp/JVN42768331/index.html · Vendor Advisory