« Volver al listado

CVE-2017-15549

Estado: ModificadaAlta (8.8)—

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

EMC — Avamar ServerEMC — Integrated Data Protection ApplianceEMC — Networker

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-15549",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0",
          "versions": [
            {
              "status": "affected",
              "version": "EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-01-05T17:29:00.253",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2018/Jan/17",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/102363",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1040070",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2018/Jan/17",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/102363",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1040070",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x y EMC Integrated Data Protection Appliance 2.0. Un usuario remoto malicioso con bajos privilegios podría cargar archivos arbitrarios maliciosamente manipulados en cualquier ubicación del sistema de archivos del servidor."
    }
  ],
  "lastModified": "2026-06-17T01:07:52.630",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.1-21:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "323E56C6-6B78-451F-A80E-041D54099867"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.1-145:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D107C2E-A98C-4242-9491-6E9D77C53AA5"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.1-302:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E873853-D132-4395-8A88-1950741E4020"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.1-370:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CECC623-D5E1-491A-AE79-890BA83CEF83"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.2-32:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DE64DDE-F009-442D-8287-C2985C7907CA"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.2-309:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E603320-F634-46D0-B3F3-27B43AD853C1"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.2-401:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "381B1CF4-9A04-419C-97D1-7997E24D78EA"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.3-125:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8E173EB-AA44-4C78-AE35-5A61120A3F0B"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.3-211:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D9B1C79-59E3-4FCE-8268-1125E599CE09"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.3-226:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C79B2E0-E227-4D30-9EC0-6E186C8E1F7F"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.3-233:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCB11FC4-D82F-4F15-A559-1B86D6FD262D"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.4-58:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEE728F4-0944-4526-98A1-2610A94958AD"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.4-242:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F72F4EE3-DE40-4F99-8869-DDCA53E8FBE8"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_server:7.5-183:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D008A0B-CB0F-4338-811C-02796C31F758"
            },
            {
              "criteria": "cpe:2.3:a:emc:integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8896568-958B-45D3-893B-30E3D9E4ED5C"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:9.0:*:*:*:virtual:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4E32F32-86B3-4833-B437-DAA7875637C9"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:9.1:*:*:*:virtual:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8608852-5E06-45F1-86F5-EB5E77E6D699"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:9.2:*:*:*:virtual:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D056AFC-8E7B-454D-A190-178ECA69D379"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}