Is CVE-2017-15549 actively exploited?

CVE-2017-15549 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2017-15549?

CVE-2017-15549 has a CVSS score of 8.8 (HIGH severity). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2017-15549?

Patch guidance is available from emc security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2017-15549.

Fix CVE-2017-15549 - HIGH emc avamar server

Q: Which products are affected by CVE-2017-15549?

18 products: emc avamar server, emc avamar server, emc avamar server, emc avamar server, emc avamar server, and 13 more.

Description

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

CVSS Metrics

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-434 · Unrestricted File Upload

Metadata

Primary Vendor: EMC
Published: 1/5/2018
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

emc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : integrated_data_protection_applianceemc : networkeremc : networkeremc : networker

Remediation Guidance

Executive Summary

View on NIST NVD