CVE-2017-4914

Public PoC / Exploit (2)

Exploit-DBVMware vSphere Data Protection 5.x/6.x - Java Deserialization TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.

Weaknesses (CWE)

CWE-502

Affected Products (22)

vmware · vsphere_data_protectionvulnerable

References (8)

http://www.securityfocus.com/bid/98939

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038617

http://www.vmware.com/security/advisories/VMSA-2017-0010.html

PatchVendor Advisory

https://www.exploit-db.com/exploits/42152/

http://www.securityfocus.com/bid/98939

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038617

http://www.vmware.com/security/advisories/VMSA-2017-0010.html

PatchVendor Advisory