9.8crit
CVE-2017-8021
EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by mali…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
2.1%
percentile 81%
Public exploits
0
none known
Summary
EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system.
Exploit prediction (EPSS)
2.06% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- n/a EMC Elastic Cloud Storage all versions prior to 3.1
Classification
- Weakness
- CWE-1188 Initialization of a Resource with an Insecure Default
References
- seclists.org /fulldisclosure/2017/Sep/74 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/101018 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-8021
- NVD: CVE-2017-8021
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.