CVE-2017-10955
HighSummary
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability.
Risk Assessment
An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM, posing a serious security threat to the system.
Recommendation
It is recommended to update to the latest version of EMC Data Protection Advisor and monitor access to TCP port 9002.
Other vulnerabilities in EMC Data Protection Advisor 6.3.0
See all- CVE-2017-8002High
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these vulnerabilities to gain information about the application by causing execution of arbitrary SQL commands.
- CVE-2016-8211High
EMC Data Protection Advisor versions 6.1.x, 6.2, 6.2.1, 6.2.2, and 6.2.3 prior to patch 446 contain a path traversal vulnerability that may be exploited by malicious users to compromise the affected system.
Original NVD description (English source)
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. When parsing the preScript parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM. Was ZDI-CAN-4697. NOTE: Dell EMC disputes that this is a vulnerability