CVE-2017-8007

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-09-22 · updated 2026-06-17
Weakness: CWE-22

Description

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.

Affected products

Dell Emc M&R: all versions
Dell EMC Storage M&R: all versions
Dell Emc Vipr Srm: through 4.0.2
Dell Emc Vnx Monitoring And Reporting: all versions

References

http://seclists.org/fulldisclosure/2017/Sep/51
http://www.securityfocus.com/bid/100957
http://www.securitytracker.com/id/1039417
http://www.securitytracker.com/id/1039418
http://seclists.org/fulldisclosure/2017/Sep/51
http://www.securityfocus.com/bid/100957
http://www.securitytracker.com/id/1039417
http://www.securitytracker.com/id/1039418

Get alerted when CVE-2017-8007 or the next vulnerability affects your stack