CVE-2017-15549

Published: Jan 5, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

Affected (18)

Products: Emc: Avamar Server, Integrated Data Protection Appliance, Networker

Emc

3 products

Avamar Server

Integrated Data Protection Appliance

Networker

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Emc Avamar Server	Version 7.1-145 sp1
Emc Avamar Server	Version 7.1-21 sp2
Emc Avamar Server	Version 7.1-302
Emc Avamar Server	Version 7.1-370
Emc Avamar Server	Version 7.2-309
Emc Avamar Server	Version 7.2-32 sp1
Emc Avamar Server	Version 7.2-401
Emc Avamar Server	Version 7.3-125 sp1
Emc Avamar Server	Version 7.3-211
Emc Avamar Server	Version 7.3-226
Emc Avamar Server	Version 7.3-233
Emc Avamar Server	Version 7.4-242
Emc Avamar Server	Version 7.4-58 sp1
Emc Avamar Server	Version 7.5-183
Emc Integrated Data Protection Appliance	Version 2.0
Emc Networker	Version 9.0
Emc Networker	Version 9.1
Emc Networker	Version 9.2