CVE-2017-12477
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 68%
from disclosure to weapon1 days
Published on NVDAug 7
1st PoC+1d
metasploit+1d
exploitation probability
68%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42957exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43031cve_referencewww.exploit-db.com/exploits/43031/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.