What’s Vulnerable › Vulnerabilities

CVE-2017-15550

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-05 · updated 2026-06-17
• Weakness: CWE-22

Description

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal.

Affected products

• EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226: 7.1-21-sp2, 7.1-145-sp1, 7.1-302, 7.1-370, 7.2-32-sp1, 7.2-309 (+8)
• EMC Integrated Data Protection Appliance: 2.0
• EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: 9.0, 9.1, 9.2

References

• http://seclists.org/fulldisclosure/2018/Jan/17
• http://www.securityfocus.com/bid/102358
• http://www.securitytracker.com/id/1040070
• http://seclists.org/fulldisclosure/2018/Jan/17
• http://www.securityfocus.com/bid/102358
• http://www.securitytracker.com/id/1040070

Get alerted when CVE-2017-15550 or the next vulnerability affects your stack