CVE:CVE-2023-27105
CNNVD:CNNVD-202304-1997
Shanling MTouch OS是中国Shanling公司的一个音乐播放器。
Shanling MTouch OS v4.3版本的Shanling M5S Portable Music Player、Shanling MTouch OS v3.3版本的Shanling M2X Portable Music Player存在安全漏洞。攻击者利用该漏洞可以任意读取、删除或修改任何关键系统文件。
solution:Upgrade shanling eddict_player to a higher version than 2.1.3,and avoid the version 2.1.3; Upgrade shanling mtouch_os to a higher version than 3.3,and avoid the version 3.3