Back to Database
Status published
Critical
CVE-2017-9830
Remote Code Execution is possible in Code42 CrashPlan 5.4.x via...
Vulnerability Description
Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiation) it creates an RMI server that listens on a TCP port and deserializes objects sent by TCP clients.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9830
Credits & Attribution
No credits recorded in the NVD database.
More from code42
View All →CVE-2021-43269
In Code42 app before 8.8.0, eval injection allows an attacker...
High
8.8
CVE-2020-12736
Code42 environments with on-premises server versions 7.0.4 and earlier allow...
High
7.2
CVE-2019-16861
Code42 server through 7.0.2 for Windows has an Untrusted Search...
High
7.3
CVE-2019-16860
Code42 app through version 7.0.2 for Windows has an Untrusted...
High
7.3
CVE-2019-15131
In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and...
Critical
9.8
Affected Vendor
code42
View all reports →Affected Software
crashplan
Vulnerable Versions:
5.4
Timeline
Official Publish:
June 27th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.