Vulnerability Details CVE-2017-12945
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.254
EPSS Ranking 96.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html
- https://documentation.mersive.com/content/pages/release-notes.htm
- https://github.com/aress31/cve-2017-12945
- https://www.exploit-db.com/exploits/47722
- http://packetstormsecurity.com/files/155494/Mersive-Solstice-2.8.0-Remote-Code-Execution.html
- https://documentation.mersive.com/content/pages/release-notes.htm
- https://github.com/aress31/cve-2017-12945
- https://www.exploit-db.com/exploits/47722
Products affected by CVE-2017-12945
-
cpe:2.3:h:mersive:solstice:-
-
cpe:2.3:o:mersive:solstice_firmware:-
-
cpe:2.3:o:mersive:solstice_firmware:2.6.0
-
cpe:2.3:o:mersive:solstice_firmware:2.6.2
-
cpe:2.3:o:mersive:solstice_firmware:2.7.0
-
cpe:2.3:o:mersive:solstice_firmware:2.7.2
-
cpe:2.3:o:mersive:solstice_firmware:2.7.3
-
cpe:2.3:o:mersive:solstice_firmware:2.8.0