CVE-2017-15567 : The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allow

The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK

Published 2017-10-23 08:29:01

Updated 2024-08-05 20:15:31

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2017-15567

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-15567

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

Products affected by CVE-2017-15567

Idemia » Mso 1300 Firmware » Version: N/A
cpe:2.3:o:idemia:mso_1300_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Idemia » Mso 1300 » Version: N/A

Vulnerability Details : CVE-2017-15567

Exploit prediction scoring system (EPSS) score for CVE-2017-15567

CVSS scores for CVE-2017-15567

References for CVE-2017-15567

Products affected by CVE-2017-15567