Is CVE-2017-15550 actively exploited?

CVE-2017-15550 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2017-15550?

CVE-2017-15550 has a CVSS score of 8.8 (HIGH severity). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2017-15550?

Patch guidance is available from emc security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2017-15550.

Fix CVE-2017-15550 - HIGH emc avamar server

Q: Which products are affected by CVE-2017-15550?

18 products: emc avamar server, emc avamar server, emc avamar server, emc avamar server, emc avamar server, and 13 more.

Description

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal.

CVSS Metrics

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-22 · Path Traversal

Metadata

Primary Vendor: EMC
Published: 1/5/2018
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

emc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : avamar_serveremc : integrated_data_protection_applianceemc : networkeremc : networkeremc : networker

Remediation Guidance

Executive Summary

View on NIST NVD