CVE-2017-8012: High severity dell emc m&r vulnerability
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8012?
CVE-2017-8012 has been classified as a high severity vulnerability due to its potential to cause denial of service conditions.
How can I mitigate CVE-2017-8012 in my system?
Mitigation for CVE-2017-8012 involves restricting access to JMX endpoints and implementing proper network security measures.
Which software versions are affected by CVE-2017-8012?
CVE-2017-8012 affects Dell EMC ViPR SRM versions up to 4.0.2, as well as various EMC M&R and SAS Solution Packs.
What kind of attack does CVE-2017-8012 exploit?
CVE-2017-8012 can be exploited to launch a denial of service attack through the Java Management Extensions protocol.
Is CVE-2017-8012 a persistent threat?
CVE-2017-8012 can become a persistent threat if the vulnerability is not patched or mitigated, leading to ongoing service disruptions.