Security readout for executives and security teams
Plain-English summary
Foxit MobilePDF for iOS versions before 6.1 had a directory traversal flaw in its Wi-Fi transfer handling. An attacker could bypass intended restrictions on local application files. The sources do not provide severity scoring, detailed impact, or confirmed exploitation.
Executive priority
Handle as a legacy exposure cleanup item unless sensitive documents are processed in affected app versions. The main business action is to confirm old mobile app versions are not present in the fleet.
Technical view
The CVE describes directory traversal caused by abuse of URL plus escape-character handling during Wi-Fi transfer in Foxit MobilePDF for iOS before 6.1. The apparent security boundary is file access within the local application context. No CVSS, CWE, exploit status, or detailed fix notes are included in the supplied sources.
Likely exposure
Exposure is limited to iOS devices running Foxit MobilePDF before version 6.1, especially where Wi-Fi transfer is enabled or used. The provided affected-product metadata is incomplete, but the CVE description names the app and version boundary.
Exploitation context
The source bundle does not show CISA KEV listing or any cited active exploitation. The described attack context involves abusing Wi-Fi transfer URL handling to bypass local file restrictions, but the sources do not give prerequisites, attack range, or required user interaction.
Researcher notes
Evidence is sparse. The CVE record identifies the vulnerable feature and version boundary but does not include CVSS, CWE, exploitability detail, or precise file-access impact. Avoid assuming broader iOS compromise from this record alone.
Mitigation direction
- Upgrade Foxit MobilePDF for iOS to version 6.1 or later.
- Check Foxit security bulletins for vendor guidance and support status.
- Disable or avoid Wi-Fi transfer on any unpatched devices.
- Remove legacy app versions from managed iOS device fleets.
Validation and detection
- Inventory iOS devices for Foxit MobilePDF installation and version.
- Confirm no managed devices run Foxit MobilePDF before 6.1.
- Review MDM records for legacy installations or unmanaged exceptions.
- Verify Wi-Fi transfer is not used on unpatched devices.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
File access behavior lookup
The CVE wording references file access or upload behavior, so file telemetry and web shell review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2017-16814 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.foxitsoftware.com/support/security-bulletins.phpCVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.