CVE-2017-10822 - CVE House
Back to Database
Status published High CVE-2017-10822

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu...

Vulnerability Description

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-10822

Credits & Attribution

No credits recorded in the NVD database.

References

More from Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI)

View All →
CVE-2017-2228
Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows...
High 7.8
CVE-2017-10823
Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku...
High 7.8
CVE-2017-10821
Untrusted search path vulnerability in Installer for Shin Kikan Toukei...
High 7.8

Affected Vendor

Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI)

View all reports →

Affected Software

Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30)
Vulnerable Versions:
Distributed on the website until 2017 May 17

Timeline

Official Publish: August 18th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.