{"id":"CVE-2017-10815","aliases":["EUVD-2017-2459","GHSA-f437-wcj6-p56j"],"status":"published","title":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac...","description":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02342,"percentile":0.83747,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2017-08-04T16:00:00Z","modified":"2026-06-17T01:00:45Z","products":[{"vendor":"intercom","product":"malion"},{"vendor":"intercom, inc.","product":"malion for mac"},{"vendor":"intercom, inc.","product":"malion for windows"}],"references":[{"url":"http://www.intercom.co.jp/information/2017/0801.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/en/vu/JVNVU91587298/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10815"},{"url":"https://github.com/advisories/GHSA-f437-wcj6-p56j"}],"sources":{"cve":[{"id":"CVE-2017-10815","description":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.","status":"published","published":"2017-08-04T16:00:00Z","modified":"2024-08-05T17:50:12.095Z","updated_at":"2026-11-02T14:33:13.27226Z"}],"euvd":[{"id":"EUVD-2017-2459","description":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.","status":"published","published":"2017-08-04T16:00:00Z","modified":"2024-08-05T17:50:12Z","updated_at":"2026-11-03T02:23:25.281788Z"}],"ghsa":[{"id":"GHSA-f437-wcj6-p56j","title":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac...","description":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.","status":"published","published":"2022-05-17T02:13:48Z","modified":"2023-01-27T05:04:12Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:42:24.641814Z"}],"nvd":[{"id":"CVE-2017-10815","description":"MaLion for Windows 5.2.1 and earlier (only when \"Remote Control\" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when \"Remote Control\" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.","status":"published","published":"2017-08-04T16:29:00.183Z","modified":"2026-06-17T01:00:45.323Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:03:54.862898Z"}]}}