CVE-2017-17406
NetGain Enterprise Manager RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process. Was ZDI-CAN-4753.
Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de Netgain Enterprise Manager. No se requiere autenticación para explotar esta vulnerabilidad. El fallo específico existe en un registro RMI expuesto, que escucha en los puertos TCP 1800 y 1850 por defecto. El problema deriva de la falta de validación correcta de información proporcionada por el usuario, lo que puede dar como resultado la deserialización de datos no fiables. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código arbitrario en el contexto del actual proceso. Anteriormente era ZDI-CAN-4753.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability.
The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-12-05 CVE Reserved
- 2017-12-13 CVE Published
- 2024-08-05 CVE Updated
- 2024-11-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-502: Deserialization of Untrusted Data
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://www.tenable.com/security/research/tra-2018-02 | Third Party Advisory | |
https://zerodayinitiative.com/advisories/ZDI-17-953 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Netgain-systems Search vendor "Netgain-systems" | Enterprise Manager Search vendor "Netgain-systems" for product "Enterprise Manager" | < 7.2.766 Search vendor "Netgain-systems" for product "Enterprise Manager" and version " < 7.2.766" | - |
Affected
|