ByteOS Network

Vulnerability Details :

CVE-2017-17429

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-16 Jan, 2018 | 19:00

Updated At-05 Aug, 2024 | 20:51

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:16 Jan, 2018 | 19:00

Updated At:05 Aug, 2024 | 20:51

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017	x_refsource_CONFIRM

Hyperlink: https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017	x_refsource_CONFIRM x_transferred

Hyperlink: https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:16 Jan, 2018 | 19:29

Updated At:03 Oct, 2019 | 00:03

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

k7computing>>antivirus>>Versions before 15.1.0.53(exclusive)

cpe:2.3:a:k7computing:antivirus:*:*:*:*:premium:*:*:*

k7computing>>antivirus>>Versions before 15.1.0308(exclusive)

cpe:2.3:a:k7computing:antivirus:*:*:*:*:plus:*:*:*

k7computing>>endpoint>>Versions before 14.2.0137(exclusive)

cpe:2.3:a:k7computing:endpoint:*:*:*:*:*:*:*:*

k7computing>>internet_security>>Versions before 15.1.0297(exclusive)

cpe:2.3:a:k7computing:internet_security:*:*:*:*:*:*:*:*

k7computing>>total_security>>Versions before 15.1.0324(exclusive)

cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*

k7computing>>total_security>>Versions before 16.0.0131(exclusive)

cpe:2.3:a:k7computing:total_security:*:*:*:*:plus:*:*:*

k7computing>>ultimate_security>>Versions before 15.1.0324(exclusive)

cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017	cve@mitre.org	Vendor Advisory

Hyperlink: https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017

Source: cve@mitre.org

Resource:

Vendor Advisory

Similar CVEs

104Records found

CVE-2021-1968

Matching Score-4

Assigner-Qualcomm, Inc.

View Details

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.02% / 3.01%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 00:00

Updated-03 Aug, 2024 | 16:25

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 wcn3991_firmware mdm9150_firmware wcn3991 sd678 sa6150p_firmware qca8337_firmware sa8145p_firmware qcs610 sda429w_firmware wcd9380_firmware sd_675 fsm10056 qca8337 qca6595 sdx55m_firmware csra6620 fsm10055_firmware qca6574 wcn3950_firmware sd665_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware sa6155 qcs410 wcd9370 csra6620_firmware sd_675_firmware sd675_firmware qca6574a csra6640_firmware qcs6125_firmware qca6584au_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn3998 sd_8cx_firmware wcn3950 sd720g qca6574_firmware wcd9340_firmware wcn3660b sd855 wsa8815 sd665 sd_8c_firmware wcn3660b_firmware sa8155 qca6574a_firmware qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware wcn3980_firmware wcn3610_firmware qca6420 qca6391 sdx55m aqt1000_firmware qca6584au sa6155p_firmware wcn3999 sd678_firmware ar8031_firmware qcs6125 sa8155_firmware qcs405 qca6430 wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sm6250 wcd9340 sa8195p wsa8810_firmware wcd9341_firmware qcm6125 wsa8810 fsm10056_firmware wcd9335 sa6155p qcs610_firmware mdm9150 sd_8c sa6145p wcd9341 ar8031 qca6696_firmware qca6595_firmware qcs405_firmware sa8145p qca6696 qca6391_firmware ar8035 wcd9375 sd_8cx aqt1000 sa8150p wcd9370_firmware sm6250_firmware sa6150p sdx55 sa8155p csra6640 sda429w sd675 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware sa8195p_firmware qcs410_firmware ar8035_firmware wcn3610 qcm6125_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

CVE-2021-0404

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-4.4||MEDIUM

EPSS-0.02% / 3.29%

7 Day CHG~0.00%

Published-26 Feb, 2021 | 20:19

Updated-03 Aug, 2024 | 15:40

In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039.

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-20

Improper Input Validation

CVE-2020-9110

Matching Score-4

Assigner-Huawei Technologies

View Details

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-4.6||MEDIUM

EPSS-0.03% / 6.68%

7 Day CHG~0.00%

Published-12 Oct, 2020 | 14:03

Updated-04 Aug, 2024 | 10:19

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario, the attacker can gain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-taurus-an00b_firmware taurus-an00b Taurus-AN00B

CWE ID-CWE-20

Improper Input Validation

CVE-2020-9239

Matching Score-4

Assigner-Huawei Technologies

View Details

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.03% / 7.79%

7 Day CHG~0.00%

Published-11 Sep, 2020 | 13:25

Updated-04 Aug, 2024 | 10:19

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17429

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs