CVE-2017-2289: Kddi Qua Station Firmware

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Kddi Qua Station Firmware: version 1.00.03 only

Published 2017-08-18. Last modified 2026-06-17.