CVE-2017-12477

EPSS 68.2%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 68.2%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

07 Aug 2017Published on NVD

08 Aug 2017Metasploit module available

08 Aug 2017Public PoC

Weaponization speed

same dayto first PoC

same dayto Metasploit module

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/43031/unverified exploitdbwww.exploit-db.com/exploits/42957unverified exploitdbwww.exploit-db.com/exploits/43031unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://support.unitrends.com/UnitrendsBackup/s/article/000005755 https://www.exploit-db.com/exploits/43031/