CVE-2017-15310 Vulnerability Details

  /     /     /  

CVE-2017-15310 Metadata Quick Info

CVE Published: 22/12/2017 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: huawei | Vendor: Huawei Technologies Co., Ltd. | Product: iReader
Status : PUBLISHED

---

CVE-2017-15310 Description

Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: arbitrary file deletion
Source: Huawei Technologies Co., Ltd.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).