CVE-2017-2108

HIGH

PrimeDrive Desktop App <1.4.3 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96619
Vendor Advisory x_refsource_misc
http://www.softbank.jp/biz/news/cloud/170215/
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN88713190/index.html

Scores

CVSS v3 7.8
EPSS 0.0074
EPSS Percentile 49.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-426
Status published
Products (2)
softbank/primedrive_desktop_application < 1.4.3
SoftBank Corp./PrimeDrive Desktop Application version 1.4.3 and earlier
Published Apr 28, 2017
Tracked Since Feb 18, 2026