Emc VNX1 Firmware vulnerabilities

3 CVEs affecting Emc VNX1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-4987, published 2017-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-4984, published 2017-06-19. Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days. In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a…
CVE-2017-4987, published 2017-06-19. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may…
CVE-2017-4985, published 2017-06-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization…