critical9.8Public exploit code
CVE-2017-4914
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware vSphere Data Protection 5.x/6.x - Java Deserialization2017-06-10 · remote · multiple · Verified
Impact
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vsphere Data Protection | Versions 5.5.1, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98939
- http://www.securitytracker.com/id/1038617
- http://www.vmware.com/security/advisories/VMSA-2017-0010.html
- https://www.exploit-db.com/exploits/42152/
- http://www.securityfocus.com/bid/98939
- http://www.securitytracker.com/id/1038617
- http://www.vmware.com/security/advisories/VMSA-2017-0010.html
- https://www.exploit-db.com/exploits/42152/