CVE-2017-4990
CriticalSummary
In EMC Avamar Server Software versions 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, and 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory, which could allow the attacker to execute arbitrary code on the Avamar Server system.
Risk Assessment
An attacker could gain full control over the system, leading to serious threats to data security and system integrity.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and restrict access to the file upload feature to authorized users.
Original NVD description (English source)
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.