cvedb.io
CVE-2017-2157
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2017-05-12T18:29:00.920 · Last modified 2026-06-17T01:15:39.530

Summary

Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

jpki — the_public_certification_service_for_individuals

Does this affect you?

Add your gear to cvedb and we'll alert you only when jpki ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.