CVE-2017-8012

HIGH

EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) - Denial of Service via JMX Protocol

Title source: llm

Description

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039418

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100982

Mailing List, Third Party Advisory x_refsource_confirm

http://seclists.org/fulldisclosure/2017/Sep/51

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039417

Scores

CVSS v3 7.4

EPSS 0.0069

EPSS Percentile 72.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Details

Status published

Products (5)

dell/emc_m\&r

dell/emc_storage_monitoring_and_reporting

dell/emc_vipr_srm < 4.0.2

dell/emc_vnx_monitoring_and_reporting

n/a/EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4Net) for SAS Solution Packs

Published Sep 22, 2017

Tracked Since Feb 18, 2026