PatchTheCVEflashair vulnerabilities and fixes
Recent CVEs affecting flashair, with upgrade or downgrade steps. 4 tracked.
flashair has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-05-22. Highest priority: CVE-2017-2149 (score 53/100).
- CVE-2017-2162 MEDIUM 4.3 UPGRADE FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/
- CVE-2017-2161 LOW 3.5 UPGRADE FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/
- CVE-2017-2149 HIGH 8.8 UPGRADE Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC
- CVE-2016-4863 MEDIUM 4.3 UPGRADE The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC
FAQ
How do I fix flashair vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flashair being exploited right now?
None of the tracked flashair CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flashair CVE should I patch first?
CVE-2017-2149 currently ranks highest (53/100): Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC .