Lucene search

[email protected]CVE-2017-15549

HistoryJan 05, 2018 - 5:29 p.m.

CVE-2017-15549

2018-01-0517:29:00

CWE-434

[email protected]

web.nvd.nist.gov

emc

avamar

networker

file upload

vulnerability

nvd

security issue

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.8%

JSON

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

CPENameOperatorVersion
emc:integrated_data_protection_applianceemc integrated data protection applianceeq2.0
emc:networkeremc networkereq9.2
emc:networkeremc networkereq9.1
emc:networkeremc networkereq9.0
emc:avamar_serveremc avamar servereq7.5-183
emc:avamar_serveremc avamar servereq7.4-242
emc:avamar_serveremc avamar servereq7.4-58
emc:avamar_serveremc avamar servereq7.3-211
emc:avamar_serveremc avamar servereq7.3-226
emc:avamar_serveremc avamar servereq7.3-233

CPE	Name	Operator	Version
emc:integrated_data_protection_appliance	emc integrated data protection appliance	eq	2.0
emc:networker	emc networker	eq	9.2
emc:networker	emc networker	eq	9.1
emc:networker	emc networker	eq	9.0
emc:avamar_server	emc avamar server	eq	7.5-183
emc:avamar_server	emc avamar server	eq	7.4-242
emc:avamar_server	emc avamar server	eq	7.4-58
emc:avamar_server	emc avamar server	eq	7.3-211
emc:avamar_server	emc avamar server	eq	7.3-226
emc:avamar_server	emc avamar server	eq	7.3-233

Rows per page:

1-10 of 181

References

seclists.org/fulldisclosure/2018/Jan/17

www.securityfocus.com/bid/102363

www.securitytracker.com/id/1040070

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

69.8%

JSON

Related for CVE-2017-15549

cvelist1 prion1 nessus1 threatpost1 vmware1