Loading
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.
Use CWE-287, Kaseya vendor hub and Unitrends Backup product page to widen CVE-2017-12477 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-40386, CVE-2021-43044 and CVE-2021-43042 for nearby disclosures in the same product family.