High severity · published Sep 1, 2017
CVE-2017-10829
Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain…
7.8
CVSS
1.2%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Remote Support Tool (Enkaku Support Tool) · NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
All versions distributed through the website till 2017 August 10 · source: vendor
ES
Enkaku Support Tool · Ntt
All versions, or not specified · source: NVD
Affected product
RS
Remote Support Tool (Enkaku Support Tool)
NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-10829
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-10829
Vendor Advisory
http://flets-w.com/topics/remote_support_vulnerability/
Vendor Advisory
https://flets.com/osa/remote/pc_tool.html
Third Party Advisory
https://jvn.jp/en/jp/JVN26115441/index.html