CVE-2017-4914

Critical

Published: 07/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

VMware vSphere Data Protection (VDP) versions 6.1.x, 6.0.x, 5.8.x, and 5.5.x contain a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.

Risk Assessment

This vulnerability poses a risk of remote code execution, which could lead to unauthorized control over the system.

Recommendation

It is recommended to update to the latest version of VMware vSphere Data Protection to mitigate this vulnerability.

Original NVD description (English source)

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.