CVE-2017-15309

High

Published: 22/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Huawei iReader app before version 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store malicious files in an arbitrary directory.

Risk Assessment

Exploitation of this vulnerability may lead to the storage of malicious software on the system, posing a threat to user data security.

Recommendation

It is recommended to update the Huawei iReader app to the latest version to mitigate this vulnerability.

Other vulnerabilities in Huawei iReader app

CVE-2017-15308High
The Huawei iReader app before version 8.0.2.301 has an input validation vulnerability that allows an attacker to control app access and load malicious websites.

Original NVD description (English source)

Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS