CVE-2023-27105

A vulnerability in the Wi-Fi file transfer module of Shanling M5S Portable Music Player with Shanling MTouch OS v4.3 and Shanling M2X Portable Music Player with Shanling MTouch OS v3.3 allows attackers to arbitrarily read, delete, or modify any critical system files via directory traversal.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://en.shanling.com/	Product
https://hexavector.github.io/4bf46f12/	Exploit Third Party Advisory
https://en.shanling.com/	Product
https://hexavector.github.io/4bf46f12/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:shanling:eddict_player:2.1.3:*:*:*:*:android:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:shanling:mtouch_os:3.3:*:*:*:*:*:*:*

cpe:2.3:h:shanling:m2x:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:52

Type	Values Removed	Values Added
References	~~() https://en.shanling.com/ - Product~~	() https://en.shanling.com/ - Product
References	~~() https://hexavector.github.io/4bf46f12/ - Exploit, Third Party Advisory~~	() https://hexavector.github.io/4bf46f12/ - Exploit, Third Party Advisory

04 May 2023, 18:59

Type	Values Removed	Values Added
References	~~(MISC) https://hexavector.github.io/4bf46f12/ -~~	(MISC) https://hexavector.github.io/4bf46f12/ - Exploit, Third Party Advisory
References	~~(MISC) https://en.shanling.com/ -~~	(MISC) https://en.shanling.com/ - Product
CWE		CWE-22
First Time		Shanling mtouch Os Shanling eddict Player Shanling m2x Shanling
CPE		cpe:2.3:h:shanling:m2x:-:::::::* cpe:2.3:o:shanling:mtouch_os:3.3:::::::* cpe:2.3:a:shanling:eddict_player:2.1.3:::::android::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

25 Apr 2023, 15:57

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-04-25 15:15

Updated : 2025-02-03 19:15

NVD link : CVE-2023-27105

Mitre link : CVE-2023-27105

CVE.ORG link : CVE-2023-27105

JSON object : View

Products Affected

shanling

eddict_player
mtouch_os
m2x

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2023-27105", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-04-25T15:15:08.783", "references": [{"url": "https://en.shanling.com/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://hexavector.github.io/4bf46f12/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://en.shanling.com/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://hexavector.github.io/4bf46f12/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Wi-Fi file transfer module of Shanling M5S Portable Music Player with Shanling MTouch OS v4.3 and Shanling M2X Portable Music Player with Shanling MTouch OS v3.3 allows attackers to arbitrarily read, delete, or modify any critical system files via directory traversal."}], "lastModified": "2025-02-03T19:15:10.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:shanling:eddict_player:2.1.3:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "BED08E66-5FFE-4762-BB89-3BD069D0EC78"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:shanling:mtouch_os:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C12870AC-301D-4F5C-9E5C-81EA23255DD0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:shanling:m2x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2AE7280C-81D1-407E-94D2-E50D2D21105E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}