← back
CVE-2017-3195

CVE-2017-3195

EPSS 21.4%CWE-121
Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.
Affected products
Commvault · Service Pack 6
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41823/unverifiedexploitdbwww.exploit-db.com/exploits/41823unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://kb.commvault.com/article/SEC0013http://redr2e.com/commvault-edge-cve-2017-3195/https://www.exploit-db.com/exploits/41823/https://www.kb.cert.org/vuls/id/214283http://www.securityfocus.com/bid/96941