Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2017-3195

Published: 16/12/2017 Updated: 11/12/2019
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Edge

Vulnerability Summary

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

Vulnerable Product Search on Vulmon Subscribe to Product

commvault edge 11.0.0

Exploits

Exploit DB: CommVault Edge 11 SP6 - Stack Buffer Overflow (PoC)
import socket import binascii import time import struct s = socketsocket(socketAF_INET, socketSOCK_STREAM) ssettimeout(1) sconnect(("10101085", 8400)) def sr(p=None, r=None): if p: print "sending %d bytes: %s " % (len(p)/2,p) payl = binasciia2b_hex(p) ssend(payl) if r: ...

References

CWE-119https://www.kb.cert.org/vuls/id/214283https://www.exploit-db.com/exploits/41823/http://www.securityfocus.com/bid/96941http://redr2e.com/commvault-edge-cve-2017-3195/http://kb.commvault.com/article/SEC0013https://nvd.nist.govhttps://www.exploit-db.com/exploits/41823/https://www.kb.cert.org/vuls/id/214283
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook