PT-2017-15317 · Wg-C10 · Wg-C10

Taizoh Tsukamoto · Published 2017-07-22 · Updated 2020-08-24 · CVE-2017-2277

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions WG-C10 versions 3.0.79 and earlier

Description The issue allows an attacker to bypass access restrictions, potentially obtaining or altering information stored in the external storage connected to the product. The attack vectors are not specified.

Recommendations For versions 3.0.79 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2017-2277

Affected Products

Wg-C10

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2277 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2277 · Vendor Advisory
• https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10 · Vendor Advisory
• https://jvn.jp/en/jp/JVN77412145/index.html · Note