CVE-2017-10828

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION	Flets Install Tool	All versions distributed through the website till 2017 August 8

References

http://flets-w.com/topics/inst_tool_vulnerability/Vendor Advisory
https://jvn.jp/en/jp/JVN14926025/index.htmlThird Party Advisory, VDB Entry
http://flets-w.com/topics/inst_tool_vulnerability/Vendor Advisory
https://jvn.jp/en/jp/JVN14926025/index.htmlThird Party Advisory, VDB Entry

Timeline

Published: Aug 29, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-108297.8Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 Augu CVE-2017-10837.5In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written CVE-2017-108307.8Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an u CVE-2017-108317.8Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Sof CVE-2017-108329.8"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vec CVE-2017-108339.1"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or CVE-2017-108346.5Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read CVE-2017-108358.8"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspeci CVE-2017-108367.8Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u CVE-2017-108376.1Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unsp CVE-2017-108386.1Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspec CVE-2017-108398.8SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via un