What’s Vulnerable › Vulnerabilities
CVE-2017-2154
- Severity: high (CVSS 7.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-04-28 · updated 2026-06-17
- Weakness: CWE-20
Description
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
- JustSystems Hanako: 2015, 2016, 2017
- JustSystems Hanako Police: 5
- JustSystems Hanako Pro: 3
- JustSystems Just Frontier: 3
- JustSystems Just Government: 3
- JustSystems Just Jump Class: 2
- JustSystems Just Office: 3
- JustSystems Just Police: 3
- JustSystems Just School: 6
References
- https://jvn.jp/en/jp/JVN54268888/index.html
- https://www.justsystems.com/jp/info/js17002.html
- https://jvn.jp/en/jp/JVN54268888/index.html
- https://www.justsystems.com/jp/info/js17002.html
Get alerted when CVE-2017-2154 or the next vulnerability affects your stack