CVE-2017-3195

2017-12-1514:00:00

CWE-121

certcc

www.cve.org

0.035 Low

EPSS

Percentile

91.5%

JSON

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

CNA Affected

[
  {
    "product": "Service Pack 6",
    "vendor": "Commvault",
    "versions": [
      {
        "status": "affected",
        "version": "Version 11 prior to SP7"
      },
      {
        "status": "affected",
        "version": "version 11 SP6 prior to hotfix 590"
      }
    ]
  }
]