Remote Code Execution Vulnerability in Netgain Enterprise Manager
CVE-2017-17406

9.8CRITICAL

Key Information:

Vendor

Netgain Systems

Status
Netgain Systems Enterprise Manager
Vendor
CVE Published:
23 January 2018

What is CVE-2017-17406?

This vulnerability permits remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager without requiring authentication. The flaw arises from an exposed RMI registry listening on TCP ports 1800 and 1850, which fails to properly validate user-supplied data. This oversight facilitates the deserialization of untrusted data, enabling an attacker to execute malicious code within the context of the running process.

Affected Version(s)

NetGain Systems Enterprise Manager v7.2.586 build 877

References

https://zerodayinitiative.com/advisories/ZDI-17-953
x_refsource_MISC
https://www.tenable.com/security/research/tra-2018-02
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.