CVE-2011-4696

CVE-2011-4696 describes a directory traversal vulnerability in Eye-Fi Helper versions prior to 3.4.23. This flaw allows an attacker, positioned as a man-in-the-middle, to create arbitrary files on a vulnerable system by injecting ".." sequences into the filesignature parameter of a GetPhotoStatus request. The vulnerability has a CVSS score of 4.3, indicating a medium severity, and requires adjacent network access and medium attack complexity, with potential impact limited to partial integrity and availability. Despite its age, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.