CVE-2017-4914

2017-06-0717:00:00

vmware

www.cve.org

9.7 High

AI Score

Confidence

High

0.054 Low

EPSS

Percentile

93.2%

JSON

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.

CNA Affected

[
  {
    "product": "vSphere Data Protection (VDP)",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.x"
      },
      {
        "status": "affected",
        "version": "6.0.x"
      },
      {
        "status": "affected",
        "version": "5.8.x"
      },
      {
        "status": "affected",
        "version": "5.5.x"
      }
    ]
  }
]