CVE-2017-4914

CVE-2017-4914: vulnerability in VMware vSphere Data Protection (VDP)

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 8.8%
from disclosure to weapon3 days
Published on NVDJun 7
1st PoC+3d
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — VMware vSphere Data Protection (VDP)

In the same product, most dangerous first.