CVE-2017-17849

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-17849 describes a buffer overflow vulnerability in GetGo Download Manager version 5.3.0.2712 and earlier. This could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.

Risk Assessment

This vulnerability poses a risk of remote code execution, which can severely compromise the security of NAS devices within an organization.

Recommendation

It is recommended to update GetGo Download Manager to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.