CVE-2017-4990

2017-06-2120:00:00

dell

www.cve.org

9.8 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.2%

JSON

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.

CNA Affected

[
  {
    "product": "EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226"
      }
    ]
  }
]