// For flags

CVE-2017-15549

 

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

Se ha descubierto un problema en EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x y EMC Integrated Data Protection Appliance 2.0. Un usuario remoto malicioso con bajos privilegios podría cargar archivos arbitrarios maliciosamente manipulados en cualquier ubicación del sistema de archivos del servidor.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-10-17 CVE Reserved
  • 2018-01-05 CVE Published
  • 2024-03-02 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.1-21
Search vendor "Emc" for product "Avamar Server" and version "7.1-21"
sp2
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.1-145
Search vendor "Emc" for product "Avamar Server" and version "7.1-145"
sp1
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.1-302
Search vendor "Emc" for product "Avamar Server" and version "7.1-302"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.1-370
Search vendor "Emc" for product "Avamar Server" and version "7.1-370"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.2-32
Search vendor "Emc" for product "Avamar Server" and version "7.2-32"
sp1
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.2-309
Search vendor "Emc" for product "Avamar Server" and version "7.2-309"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.2-401
Search vendor "Emc" for product "Avamar Server" and version "7.2-401"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.3-125
Search vendor "Emc" for product "Avamar Server" and version "7.3-125"
sp1
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.3-211
Search vendor "Emc" for product "Avamar Server" and version "7.3-211"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.3-226
Search vendor "Emc" for product "Avamar Server" and version "7.3-226"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.3-233
Search vendor "Emc" for product "Avamar Server" and version "7.3-233"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.4-58
Search vendor "Emc" for product "Avamar Server" and version "7.4-58"
sp1
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.4-242
Search vendor "Emc" for product "Avamar Server" and version "7.4-242"
-
Affected
Emc
Search vendor "Emc"
Avamar Server
Search vendor "Emc" for product "Avamar Server"
7.5-183
Search vendor "Emc" for product "Avamar Server" and version "7.5-183"
-
Affected
Emc
Search vendor "Emc"
Integrated Data Protection Appliance
Search vendor "Emc" for product "Integrated Data Protection Appliance"
2.0
Search vendor "Emc" for product "Integrated Data Protection Appliance" and version "2.0"
-
Affected
Emc
Search vendor "Emc"
Networker
Search vendor "Emc" for product "Networker"
9.0
Search vendor "Emc" for product "Networker" and version "9.0"
virtual
Affected
Emc
Search vendor "Emc"
Networker
Search vendor "Emc" for product "Networker"
9.1
Search vendor "Emc" for product "Networker" and version "9.1"
virtual
Affected
Emc
Search vendor "Emc"
Networker
Search vendor "Emc" for product "Networker"
9.2
Search vendor "Emc" for product "Networker" and version "9.2"
virtual
Affected