CVE-2017-2277

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the product via unspecified vectors.

Metrics

CVSS 3.0 9.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

Vendor	Product	Versions
Sony Corporation	WG-C10	v3.0.79 and earlier

References

https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10Vendor Advisory
https://jvn.jp/en/jp/JVN77412145/index.htmlThird Party Advisory
https://esupport.sony.com/US/p/news-item.pl?news_id=527&mdl=WGC10Vendor Advisory
https://jvn.jp/en/jp/JVN77412145/index.htmlThird Party Advisory

Timeline

Published: Jul 22, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-22785.9The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 cer CVE-2017-22797.8Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspe CVE-2017-22808.8WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute a CVE-2017-22818.8WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-22826.8Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.CVE-2017-22838.0WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute ar CVE-2017-22846.1Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via CVE-2017-22856.1Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script o CVE-2017-22867.8Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S3 CVE-2017-22877.8Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan CVE-2017-22887.8Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an uns CVE-2017-22897.8Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privi