CVE-2023-27105

Name of the Vulnerable Software and Affected Versions Shanling M5S Portable Music Player with Shanling MTouch OS version 4.3 Shanling M2X Portable Music Player with Shanling MTouch OS version 3.3

Description A vulnerability in the Wi-Fi file transfer module allows attackers to arbitrarily read, delete, or modify any critical system files via directory traversal.

Recommendations For Shanling M5S Portable Music Player with Shanling MTouch OS version 4.3, consider disabling the Wi-Fi file transfer module until a patch is available. For Shanling M2X Portable Music Player with Shanling MTouch OS version 3.3, consider disabling the Wi-Fi file transfer module until a patch is available. As a temporary workaround, restrict access to critical system files to minimize the risk of exploitation.