CVE-2017-2157

HOCH 7.3CVE-2017-2157 · Published 12/05/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-2157 ist eine Schwachstelle (HOCH (CVSS 7.3)) in the public certification service for individuals (jpki).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.51%, höher als bei 43.4% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
the public certification service for individuals jpki	`≤ 2.6≤ 3.1`	No fix yet

Description

Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

References

jvn.jp/en/jp/JVN39605485/index.html · Third Party Advisory
jpki.go.jp/download/win.html · Patch

Weitere Schwachstellen in the public certification service for individuals

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free