VulnerabilityModified

CVE-2014-1970

Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4 for Android allows remote attackers to overwrite or create arbitrary files via unspecified vectors.

MEDIUM 5.8EPSS 1.39%

Does this matter?

Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4 for Android allows remote attackers to overwrite or create arbitrary files via unspecified vectors.

CVSS 2.0: 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS: 1.39% probability · 71th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: estrongs/es file explorer
Source: vultures@jpcert.or.jp

References

http://jvn.jp/en/jp/JVN70029459/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000033
http://jvn.jp/en/jp/JVN70029459/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000033

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.