PT-2017-18066 · Dell Emc+1 · Dell Emc Vnx Monitoring/Reporting+1

Publicado 2017-09-22 · Atualizado 2021-09-13 · CVE-2017-8012

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC VNX Monitoring and Reporting versions (affected versions not specified)

Description The issue concerns the Java Management Extensions (JMX) protocol used for communication between components in the Alerting and/or Compliance components. This can be exploited to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially create arbitrary files on the affected system, leveraging inherent JMX protocol capabilities to create a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-8012

ZDI-17-826

Produtos afetados

Dell Emc Vnx Monitoring/Reporting

Java Management Extensions

Referências · 7

• http://securitytracker.com/id/1039418 · Nota
• http://securityfocus.com/bid/100982 · Nota
• http://seclists.org/fulldisclosure/2017/Sep/51 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-826 · Nota de Segurança
• http://securitytracker.com/id/1039417 · Nota
• https://osv.dev/vulnerability/CVE-2017-8012 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8012 · Nota de Segurança