CVE-2017-4990

Name: CVE-2017-4990
Creator: NVD / NIST
Published: 2017-06-21T20:29:00.33+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 3.03%

Last modified Jun 17, 2026

CVE-2017-4990 is a vulnerability of currently unknown severity. In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.. EPSS estimates a 3.03% chance of exploitation in the next 30 days.

Description

In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.

Metrics

EPSS Probability

3.03%

85.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-434

Affected Software

Vendor	Product	Versions
Emc	Avamar Server	7.3.0-226
Emc	Avamar Server	7.3.0-233
Emc	Avamar Server	7.3.1-125
Emc	Avamar Server	7.4.0-242
Emc	Avamar Server	7.4.1-58

References

http://www.securityfocus.com/archive/1/540754/30/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/99243Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038718
http://www.securityfocus.com/archive/1/540754/30/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/99243Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038718

Timeline

Published: Jun 21, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-4990?

How severe is CVE-2017-4990?

Severity scoring for CVE-2017-4990 is pending analysis. The EPSS model estimates a 3.03% probability of exploitation in the next 30 days.

How do I fix CVE-2017-4990?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-4990?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST