CVE-2017-12477: Critical severity unitrends backup vulnerability
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12477?
CVE-2017-12477 has a high severity rating due to the potential for remote command execution with root privileges.
How do I fix CVE-2017-12477?
To fix CVE-2017-12477, upgrade Unitrends Backup to version 10.0.0 or later.
What can an attacker do with CVE-2017-12477?
An attacker exploiting CVE-2017-12477 can bypass authentication and execute arbitrary commands with root privileges.
Which versions of Unitrends Backup are affected by CVE-2017-12477?
CVE-2017-12477 affects all versions of Unitrends Backup prior to 10.0.0.
Is there a workaround for CVE-2017-12477?
No official workaround for CVE-2017-12477 has been published; upgrading to a fixed version is recommended.