CVE-2017-4990

CRITICAL 9.8CVE-2017-4990 · Published 21/06/2017 · updated 17/06/2026

In short

CVE-2017-4990 is a CRITICAL (CVSS 9.8) vulnerability affecting avamar server (emc).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
avamar server emc	`= 7.3.0-226= 7.3.0-233= 7.3.1-125= 7.4.0-242= 7.4.1-58`	No fix yet

Description

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.

References

securityfocus.com/archive/1/540754/30/0/threaded · Third Party Advisory
securityfocus.com/bid/99243 · Third Party Advisory
securitytracker.com/id/1038718

More vulnerabilities in avamar server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

avamar server

emc

= 7.3.0-226= 7.3.0-233= 7.3.1-125= 7.4.0-242= 7.4.1-58

No fix yet

Description

More vulnerabilities in avamar server

See all →