CVE-2017-4985

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-19 · updated 2026-06-17
Weakness: CWE-862

Description

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.

Affected products

EMC Vnx1 Firmware: all versions
EMC Vnx2 Firmware: all versions

References

http://www.securityfocus.com/archive/1/540738/30/0/threaded
http://www.securityfocus.com/bid/99037
http://www.securityfocus.com/archive/1/540738/30/0/threaded
http://www.securityfocus.com/bid/99037

Get alerted when CVE-2017-4985 or the next vulnerability affects your stack