CVE-2017-3210

CVE-2017-3210 describes a vulnerability in applications utilizing the Portrait Displays SDK, versions 2.30 through 2.34, including products from Fujitsu, HP, and Philips. These applications default to insecure configurations, allowing local authenticated attackers to achieve arbitrary code execution with SYSTEM privileges due to the pdiservice.exe component running with excessive permissions and being writable by all Authenticated Users. The vulnerability has a CVSSv3 score of 7.8 (HIGH), indicating a local attack vector with low attack complexity and low privileges required, leading to high impacts on confidentiality, integrity, and availability. Its EPSS score is very low at 0.00053, suggesting a low probability of exploitation in the wild. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, the vulnerability is not listed on the CISA KEV catalog or the Hot List, further indicating a low current threat level.