CVE-2017-2161

Severity: low (CVSS 3.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-22 · updated 2026-06-17
Weakness: CWE-425

Description

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.

Affected products

Toshiba Flashair: through 2.00.04; through 3.00.02

References

http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html
http://www.toshiba-personalstorage.net/news/20170516a.htm
https://jvn.jp/en/jp/JVN46372675/index.html
http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html
http://www.toshiba-personalstorage.net/news/20170516a.htm
https://jvn.jp/en/jp/JVN46372675/index.html

Get alerted when CVE-2017-2161 or the next vulnerability affects your stack