PatchTheCVECVE-2017-11135: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and thr
CVE-2017-11135 is a high-severity flaw (CVSS 7.5) affecting heinekingmedia, heinekingmedia. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software, in the sense that the StashCat client side has no secure way to signal that it is ending a s
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.1% (top 35%) |
| CISA exploited list | No |
| Weakness | CWE-862 |
| Published | 2017-08-01 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-11135?
heinekingmedia: upgrade to newer than 1.7.5; heinekingmedia: upgrade to newer than 0.0.86w. Exact commands for each OS are on this page.
Is CVE-2017-11135 being exploited?
CVE-2017-11135 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-11135 affect?
CVE-2017-11135 affects heinekingmedia, heinekingmedia. Severity is high (CVSS 7.5). An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the devi
How urgent is CVE-2017-11135?
Priority 47/100. High severity; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2017-11136 MEDIUM 6.5 UPGRADE UPGRADE An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and thr
- CVE-2017-11134 MEDIUM 6.5 UPGRADE An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android
- CVE-2017-11133 HIGH 7.5 UPGRADE UPGRADE An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and thr
- CVE-2017-11131 MEDIUM 5.9 UPGRADE UPGRADE An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and thr
- CVE-2017-11130 HIGH 8.1 UPGRADE UPGRADE An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and thr