CVE Catalog

CVE-2017-3195

Critical
Published: Translated: NVD NIST

Summary

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

Risk Assessment

Exploitation of this vulnerability could allow an attacker to gain full control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to version 11 SP7 or version 11 SP6 with hotfix 590 to mitigate this vulnerability.

Original NVD description (English source)

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS