CVE-2017-12477
CriticalSummary
A vulnerability was discovered in the bpserverd protocol in Unitrends Backup (UB) before version 10.0.0, allowing authentication to be bypassed. A remote attacker could exploit this issue to execute arbitrary commands with root privileges on the target system.
Risk Assessment
This vulnerability poses a serious security risk, allowing attackers full access to the system with administrator privileges.
Recommendation
It is recommended to update Unitrends Backup to version 10.0.0 or later to mitigate this vulnerability and implement additional security measures.
Original NVD description (English source)
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.