CVE Catalog

CVE-2017-1000215

Critical
Published: Translated: NVD NIST

Summary

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute code on the server, posing a serious security threat.

Recommendation

It is recommended to upgrade ROOT xrootd to a version above 4.6.0 to mitigate this vulnerability.

Original NVD description (English source)

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

Vulnerability data from NVD (NIST) · CISA KEV · EPSS