CVE-2017-8012

High

Published: 22/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could exploit this vulnerability to create arbitrary files on the affected system.

Risk Assessment

This vulnerability could lead to significant disruptions in system operation, affecting service availability within the organization. Attackers may exploit it to conduct DoS attacks, potentially resulting in data loss or service interruptions.

Recommendation

It is recommended to secure JMX agent user credentials and monitor access to the JMX protocol. Additionally, consider restricting access to the Alerting and Compliance components to trusted users only.

Other vulnerabilities in EMC ViPR SRM, Storage M&R, VNX M&R, M&R (Watch4Net) for SAS Solution Packs

CVE-2017-8007High
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, there is a directory traversal vulnerability in the Webservice Gateway. Attackers with knowledge of Webservice Gateway credentials could exploit this vulnerability to gain unauthorized access to information and modify or delete data.

Original NVD description (English source)

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS