CVE-2017-4990: Malicious File Upload
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4990?
CVE-2017-4990 has a critical severity rating due to its ability to allow unauthorized code execution.
How do I fix CVE-2017-4990?
To fix CVE-2017-4990, it is recommended to update the EMC Avamar Server Software to the latest patched version.
Who is affected by CVE-2017-4990?
CVE-2017-4990 affects users of EMC Avamar Server Software versions 7.3.0-226, 7.3.0-233, 7.3.1-125, 7.4.0-242, and 7.4.1-58.
What exploit is associated with CVE-2017-4990?
CVE-2017-4990 can be exploited through the file upload feature on the system maintenance page to run arbitrary code.
Is there a workaround for CVE-2017-4990?
Currently, the only effective mitigation for CVE-2017-4990 is applying the available software updates.