CVE-2011-4696: Eye Eye-Fi Helper

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.

Affected products

• Eye Eye-Fi Helper: up to and including 3.3.0; version 2.0.3.0 only; version 2.0.4.0 only; version 2.5.1.0 only; version 2.5.4.0 only; version 2.5.5.0 only; …

Published 2014-03-03. Last modified 2026-06-16.