Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2017-12477
HistoryAug 07, 2017 - 3:29 p.m.

CVE-2017-12477

2017-08-0715:29:00
CWE-287
mitre
web.nvd.nist.gov
54
2
unitrends backup
ub
10.0.0
bpserverd
protocol
authentication bypass
remote code execution
nvd
cve-2017-12477

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.582

Percentile

97.8%

JSON

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

Affected configurations

Nvd
Node
kaseyaunitrends_backupRange<10.0
VendorProductVersionCPE
kaseyaunitrends_backup*cpe:2.3:a:kaseya:unitrends_backup:*:*:*:*:*:*:*:*

Social References

More

Related

exploitdb 2
zdt 2
metasploit 1
prion 1
packetstorm 2
openvas 2
exploitpack 1
cvelist 1
nvd 1
exploitdb
exploitdb
Unitrends UEB 9.1 - &#039;Unitrends bpserverd&#039; Remote Command Execution
2017-08-08 00:00:00
Unitrends UEB 9 - bpserverd Authentication Bypass Remote Command Execution (Metasploit)
2017-10-23 00:00:00
zdt
zdt
Unitrends UEB 9.1 - Unitrends bpserverd Remote Command Execution Exploit
2017-10-06 00:00:00
Unitrends UEB bpserverd Authentication Bypass / Remote Command Execution Exploit
2017-10-22 00:00:00
metasploit
metasploit
Unitrends UEB bpserverd authentication bypass RCE
2017-10-06 15:38:33
prion
prion
Authentication flaw
2017-08-07 15:29:00
packetstorm
packetstorm
Unitrends UEB bpserverd Authentication Bypass / Remote Command Execution
2017-10-21 00:00:00
Unitrends UEB 9.1 bpserverd Remote Command Execution
2017-10-05 00:00:00
openvas
openvas
Unitrends < 10.0.0 RCE Vulnerability - Active Check
2017-10-23 00:00:00
Unitrends < 10.0.0 Multiple Vulnerabilities
2017-10-23 00:00:00
exploitpack
exploitpack
Unitrends UEB 9.1 - Unitrends bpserverd Remote Command Execution
2017-08-08 00:00:00
cvelist
cvelist
CVE-2017-12477
2017-08-07 15:00:00
nvd
nvd
CVE-2017-12477
2017-08-07 15:29:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.582

Percentile

97.8%

JSON
Related for CVE-2017-12477
exploitdb2zdt2metasploit1prion1packetstorm2openvas2exploitpack1cvelist1nvd1