VULNERABILITY INTELLIGENCE
CVE-2017-9270
CVSS score8.7 HIGH
EPSS probability1.94%
CISA KEVNot currently listed
Published2018-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Description
In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.
Weakness classification
- CWE-20: Improper Input Validation
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')