CVE-2017-8022
HighSummary
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) related to a buffer overflow in the Server service (nsrd). A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary code on vulnerable installations of the software or cause a denial of service, depending on the target system's platform.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing attackers to remotely execute code or disrupt system operations. This could lead to data loss or service downtime.
Recommendation
It is recommended to update EMC NetWorker to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized activities.
Other vulnerabilities in EMC NetWorker
See all- CVE-2015-6849High
EMC NetWorker versions before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 are vulnerable to denial of service attacks. Remote attackers can cause process outages by sending malformed RPC authentication messages.
- CVE-2015-0530High
Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.
- CVE-2016-0916Critical
EMC NetWorker versions 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandle authentication, allowing remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.
Original NVD description (English source)
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on vulnerable installations of the software, or cause a denial of service, depending on the target system's platform.