CVE-2017-4985: High severity emc vnx2 firmware vulnerability
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4985?
CVE-2017-4985 is classified as a privilege escalation vulnerability that may allow a local authenticated user to gain root access.
How do I fix CVE-2017-4985?
To resolve CVE-2017-4985, upgrade EMC VNX2 to OE for File version 8.1.9.211 or later, and EMC VNX1 to OE for File version 7.1.80.8 or later.
Who is affected by CVE-2017-4985?
CVE-2017-4985 affects local authenticated users of EMC VNX1 and VNX2 systems running vulnerable firmware versions.
What kind of attack can exploit CVE-2017-4985?
CVE-2017-4985 can be exploited by attackers who are already authenticated locally and seek to escalate their privileges.
What should I monitor for related to CVE-2017-4985?
Monitor for any unauthorized changes to user privileges or unusual activity indicative of privilege escalation attempts on your EMC VNX systems.