VulnerabilityModified
CVE-2014-1974
Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.
MEDIUM 6.4EPSS 1.52%
Does this matter?
Lower severity and a low EPSS score (1.52%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 1.52% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- lyesoft/andexplorer
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN22670349/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
- https://play.google.com/store/apps/details?id=lysesoft.andexplorer
- https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro
- http://jvn.jp/en/jp/JVN22670349/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
- https://play.google.com/store/apps/details?id=lysesoft.andexplorer
- https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.