CVE-2017-14385
Quick assessment
Affected
n/a EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all versions, EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1, EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
EMC Data Domain DD OS和EMC Data Domain Virtual Edition都是美国易安信（EMC）公司的产品。EMC Data Domain DD OS是一套重复数据消除操作系统。EMC Data Domain Virtual Edition是一款重复数据消除存储设备。 EMC Data Domain DD OS和EMC Data Domain Virtual Edition存在安全漏洞。远程攻击者可利用该漏洞关闭SMB服务和活动目录认证或可能注入并执行代码。以下产品和版本
Possible ATT&CK Techniques 2 AI
T1201 · Password Policy Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-14385
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
EMC Data Domain DD OS和EMC Data Domain Virtual Edition 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EMC Data Domain DD OS和EMC Data Domain Virtual Edition都是美国易安信（EMC）公司的产品。EMC Data Domain DD OS是一套重复数据消除操作系统。EMC Data Domain Virtual Edition是一款重复数据消除存储设备。 EMC Data Domain DD OS和EMC Data Domain Virtual Edition存在安全漏洞。远程攻击者可利用该漏洞关闭SMB服务和活动目录认证或可能注入并执行代码。以下产品和版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all v | EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all v | - |
|
II. Public POCs for CVE-2017-14385
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-14385
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-14385 (2)
Mailing List Discussions for CVE-2017-14385 (1)
-
http://seclists.org/fulldisclosure/2017/Dec/79 x_refsource_CONFIRM
Same Patch Batch · n/a · 2017-12-20 · 57 CVEs total
| CVE-2017-14968 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-17807 | Linux kernel KEYS子系统安全漏洞 | |
| CVE-2012-2576 | 多款SolarWinds产品SQL注入漏洞 | |
| CVE-2017-17805 | Linux kernel 安全漏洞 | |
| CVE-2017-14387 | EMC Isilon OneFS 安全漏洞 | |
| CVE-2011-4955 | WordPress bSuite插件跨站脚本漏洞 | |
| CVE-2017-17806 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2017-16725 | Xiongmai IP Camera Module和DVR 缓冲区错误漏洞 | |
| CVE-2017-16717 | WECON LeviStudio HMI 缓冲区错误漏洞 | |
| CVE-2017-14969 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-16731 | ABB Ellipse 安全漏洞 | |
| CVE-2017-14967 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-14966 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-14965 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-14964 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-14963 | IKARUS anti.virus ntguard.sys驱动程序安全漏洞 | |
| CVE-2017-14962 | IKARUS Security Software anti.virus 缓冲区错误漏洞 | |
| CVE-2017-17476 | Open Ticket Request System 安全漏洞 | |
| CVE-2017-16818 | Red Hat Ceph RADOS Gateway 安全漏洞 | |
| CVE-2017-17752 | Code-Crafters Ability Mail Server 跨站脚本漏洞 |
Showing top 20 of 57 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-14385
No comments yet