HIGH🇵🇱 Wersja polska

CVE-2017-8007

CVSS 8.8v3.1pub. 2017-09-22upd. 2026-05-13

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Dell Emc M\&r

    APP
    Dell
    all versions

  • Dell Emc Storage Monitoring And Reporting

    APP
    Dell
    all versions

  • Dell Emc Vipr Srm

    APP
    Dell
    ≤ 4.0.2

  • Dell Emc Vnx Monitoring And Reporting

    APP
    Dell
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2019-18580CRITICAL10.0PL ✓same product

RCE przez deserializację Java RMI w Dell EMC Storage Monitoring and Reporting

CVE-2018-1183CRITICAL9.8PL ✓same product

XXE Injection w komponentach ECOM systemów Dell EMC (RCE/ujawnienie danych)

CVE-2017-8011CRITICAL9.8PL ✓same product

Ukryte konta z domyślnymi hasłami w produktach Dell EMC M&R i ViPR SRM

CVE-2017-8012HIGH7.4same product

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensi...

CVE-2026-22769CRITICAL10.0⚠ KEVPL ✓same vendor

Dell RecoverPoint for VMs — zahardkodowane dane uwierzytelniające (RCE, root)