CVE-2017-10955 Command injection in Dell EMC Data Protection Advisor
Authenticated attackers can execute arbitrary code with SYSTEM privileges via improper validation of the preScript parameter in EMC Data Protection Advisor.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-10955?
CVE-2017-10955 is a high-severity command injection vulnerability in Dell EMC Data Protection Advisor, published on 19 Oct 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. When parsing the preScript parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM. Was ZDI-CAN-4697. NOTE: Dell EMC disputes that this is a vulnerability
Which versions are affected by CVE-2017-10955?
It affects 1 product.
Products include Emc Data Protection Advisor.
How do I fix CVE-2017-10955?
No fix has been published for CVE-2017-10955 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2017-10955 being exploited?
There is no known exploitation of CVE-2017-10955 in the wild and no public exploit code.
Other vulnerabilities in Dell EMC Data Protection Advisor
- CVE-2017-8013 Hardcoded credentials in EMC Data Protection Advisor
- CVE-2017-8002 SQL injection in EMC Data Protection Advisor prior to 6.4
- CVE-2018-1206 Hardcoded credentials in Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110
- CVE-2012-0406 Null dereference in n/a
- CVE-2012-4616 Path traversal in n/a
Sources
Also known as GHSA-9j28-vv5h-vvcg.