CVE-2017-8020
CriticalSummary
A buffer overflow vulnerability was discovered in EMC ScaleIO 2.0.1.x in the SDBG service, which may allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows an attacker full control over the server, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update to the latest version of EMC ScaleIO to mitigate this vulnerability and implement additional security measures such as monitoring and restricting access to the SDBG service.
Other vulnerabilities in EMC ScaleIO 2.0.1.x
See all- CVE-2017-8019High
An issue was discovered in EMC ScaleIO 2.0.1.x related to message parsers (MDM, SDS, and LIA) that could allow an unauthenticated remote attacker to send specially crafted packets. This could lead to stopping ScaleIO services and causing a denial of service situation.
- CVE-2017-8001High
An issue was discovered in EMC ScaleIO 2.0.1.x where one of the support scripts saves the credentials of the MDM user in clear text in temporary log files. These files may be read by an unprivileged user with access to the server where the script was executed.
- CVE-2016-9867High
An issue was discovered in EMC ScaleIO versions before 2.0.1.1, allowing a low-privileged local attacker to modify kernel memory in the SCINI driver. This may lead to code execution and privilege escalation to root on ScaleIO Data Client (SDC) servers.
Original NVD description (English source)
An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthenticated attacker to execute arbitrary commands with root privileges on an affected server.