SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2014-0805

Directory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free application 5.4.3 and earlier, and NeoFiler Lite application 2.4.2 and earlier for Android allows attackers to overwrite or create arbitrary files via…

MEDIUM 5.8EPSS 1.38%

Does this matter?

Lower severity and a low EPSS score (1.38%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free application 5.4.3 and earlier, and NeoFiler Lite application 2.4.2 and earlier for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

CVSS 2.0
5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS
1.38% probability · 71th percentile
CISA KEV
Not listed
Weakness
CWE-22
Affected
skyarts/neofiler
Source
vultures@jpcert.or.jp

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.