Critical severity · published Jun 29, 2017
CVE-2017-4997
EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to…
9.8
CVSS
4.5%
EPSS
No
On KEV
Description
EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to compromise the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Emc Vasa Provider Virtual Appliance · Dell
through 8.3.0 · source: NVD
Affected product
EV
Emc Vasa Provider Virtual Appliance
Dell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-4997
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-4997
Third Party Advisory
http://www.securityfocus.com/archive/1/540783/30/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/99169
More from Emc Vasa Provider Virtual Appliance
9.8
CVE-2018-1183
In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual…
6.5
CVE-2022-45103
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability