CVE-2017-12477

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0710%

EPSS Percentile3.71th

Published2017年8月7日

Last Modified2026年5月13日

Vulnerability Description

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

Affected Platforms (CPE)

📦

Kaseya

Unitrends Backup

< 10.0

References & Advisories

🔗 https://support.unitrends.com/UnitrendsBackup/s/article/000005755

🔗 https://www.exploit-db.com/exploits/43031/