{"api_version":"1","generated_at":"2026-07-23T23:23:28+00:00","cve":"CVE-2017-10821","urls":{"html":"https://cve.report/CVE-2017-10821","api":"https://cve.report/api/cve/CVE-2017-10821.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-10821","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-10821"},"summary":{"title":"CVE-2017-10821","description":"Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.","state":"PUBLIC","assigner":"vultures@jpcert.or.jp","published_at":"2017-08-18 13:29:00","updated_at":"2017-08-24 17:12:00"},"problem_types":["CWE-426"],"metrics":[],"references":[{"url":"https://jvn.jp/en/jp/JVN73559859/index.html","name":"JVN#73559859","refsource":"JVN","tags":["Third Party Advisory","VDB Entry"],"title":"JVN#73559859: Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program may insecurely load Dynamic Link Libraries","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10821","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10821","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"10821","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"enecho.meti","cpe5":"shin_kikan_toukei_houkoku_data_nyuryokuyou_program","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"10821","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"enecho.meti","cpe5":"shin_kikan_toukei_houkoku_data_nyuryokuyou_program","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2017-10821","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30)","version":{"version_data":[{"version_value":"Distributed on the website until 2017 May 17 "}]}}]},"vendor_name":"Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI)"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Untrusted search path vulnerability"}]}]},"references":{"reference_data":[{"name":"JVN#73559859","refsource":"JVN","url":"https://jvn.jp/en/jp/JVN73559859/index.html"}]}},"nvd":{"publishedDate":"2017-08-18 13:29:00","lastModifiedDate":"2017-08-24 17:12:00","problem_types":["CWE-426"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"severity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:enecho.meti:shin_kikan_toukei_houkoku_data_nyuryokuyou_program:-:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"10821","Ordinal":"107864","Title":"CVE-2017-10821","CVE":"CVE-2017-10821","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"10821","Ordinal":"1","NoteData":"Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"10821","Ordinal":"2","NoteData":"2017-08-18","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"10821","Ordinal":"3","NoteData":"2017-08-18","Type":"Other","Title":"Modified"}]}}}