CVE-2017-4987: High severity emc vnx2 firmware vulnerability
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4987?
CVE-2017-4987 has been classified as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2017-4987?
To fix CVE-2017-4987, update the EMC VNX2 to OE for File version 8.1.9.211 or later, or the VNX1 to version 7.1.80.8 or later.
What systems are affected by CVE-2017-4987?
CVE-2017-4987 affects EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8.
Can CVE-2017-4987 be exploited remotely?
No, CVE-2017-4987 requires local authenticated access to exploit the vulnerability.
Who is at risk for CVE-2017-4987?
Local authenticated users of vulnerable EMC VNX systems are at risk of exploitation from CVE-2017-4987.