What’s Vulnerable › Vulnerabilities

CVE-2017-13083

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-18 · updated 2026-06-17
• Weakness: CWE-295

Description

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code

Affected products

• Akeo Consulting Rufus: through 2.17

References

• http://www.kb.cert.org/vuls/id/403768
• http://www.securityfocus.com/bid/100516
• https://github.com/pbatard/rufus/commit/c3c39f7f8a11f612c4ebf7affce25ec6928eb1cb
• https://github.com/pbatard/rufus/issues/1009
• http://www.kb.cert.org/vuls/id/403768
• http://www.securityfocus.com/bid/100516
• https://github.com/pbatard/rufus/commit/c3c39f7f8a11f612c4ebf7affce25ec6928eb1cb
• https://github.com/pbatard/rufus/issues/1009

Get alerted when CVE-2017-13083 or the next vulnerability affects your stack