What is CVE-2017-2214?

CVE-2017-2214 is a high-severity vulnerability in Jiransoft Appcheck, classified under Untrusted Search Path. CVSS score: 8.4/10. Published 2017-06-09.

How severe is CVE-2017-2214?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Jiransoft Appcheck

CVE-2017-2214

Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

EPSS: 0.017 (74.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jiransoft Appcheck
Jiransoft Appcheck_pro
Jiransoft Japan, Inc. Appcheck — versions prior to Version 2.0.1.15
Jiransoft Japan, Inc. Appcheck Pro — versions prior to Version 2.0.1.15

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_JVN, third-party-advisory)

Frequently asked questions

What is CVE-2017-2214?: CVE-2017-2214 is a high-severity vulnerability in Jiransoft Appcheck, classified under Untrusted Search Path. CVSS score: 8.4/10. Published 2017-06-09.
How severe is CVE-2017-2214?: High severity. CVSS v3 base score is 8.4 out of 10.