CVE-2017-15310

Medium

Description

Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card.

SeverityMedium
CVSS6.5
Exploit probability—
ProductHuawei Ireader
PublishedDec 22, 2017
First seenDec 22, 2017

How to fix

Update
  • huawei ireader8.0.2.301 or later

Affected products

ProductAffected versionsFixed in
huawei ireaderv < 8.0.2.3018.0.2.301

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.