CVE-2017-4985

🗓️ 19 Jun 2017 12:00:00Reported by dellType

Privilege escalation in EMC VNX2 and VNX1 due to lack of authorization checks on perl scripts. Allows local authenticated user to execute arbitrary commands as root.

Reporter	Title	Published	Views	Family All 5
CNVD	EMC VNX2 OE for File and VNX1 OE for File Local Elevation of Privilege Vulnerability	5 Jul 201700:00	–	cnvd
Cvelist	CVE-2017-4985	19 Jun 201712:00	–	cvelist
EUVD	EUVD-2017-14098	7 Oct 202500:30	–	euvd
NVD	CVE-2017-4985	19 Jun 201712:29	–	nvd
Prion	Authorization	19 Jun 201712:29	–	prion

NVD

Node

emc vnx2_firmwareMatch-

AND

emc vnx2Match-

Node

emc vnx1_firmwareMatch-

AND

emc vnx1Match-

[
  {
    "product": "EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/99037
securityfocus	www.securityfocus.com/archive/1/540738/30/0/threaded

13 May 2026 00:24Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 37.8

EPSS0.00038

CWE-862