CVE-2017-4914

Published: Jun 7, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.

Affected (22)

Products: Vmware: Vsphere Data Protection

Vmware

1 product

Vsphere Data Protection

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Vmware Vsphere Data Protection	Version 5.5.10
Vmware Vsphere Data Protection	Version 5.5.11
Vmware Vsphere Data Protection	Version 5.5.1
Vmware Vsphere Data Protection	Version 5.5.5
Vmware Vsphere Data Protection	Version 5.5.6
Vmware Vsphere Data Protection	Version 5.5.7
Vmware Vsphere Data Protection	Version 5.5.8
Vmware Vsphere Data Protection	Version 5.5.9
Vmware Vsphere Data Protection	Version 5.8.0
Vmware Vsphere Data Protection	Version 5.8.1
Vmware Vsphere Data Protection	Version 5.8.2
Vmware Vsphere Data Protection	Version 5.8.3
Vmware Vsphere Data Protection	Version 5.8.4
Vmware Vsphere Data Protection	Version 6.0.0
Vmware Vsphere Data Protection	Version 6.0.1
Vmware Vsphere Data Protection	Version 6.0.2
Vmware Vsphere Data Protection	Version 6.0.3
Vmware Vsphere Data Protection	Version 6.0.4
Vmware Vsphere Data Protection	Version 6.1.0
Vmware Vsphere Data Protection	Version 6.1.1
Vmware Vsphere Data Protection	Version 6.1.2
Vmware Vsphere Data Protection	Version 6.1.3