CVE-2017-10955

CVE-2017-10955 describes a critical remote code execution vulnerability affecting EMC Data Protection Advisor 6.3.0. This flaw, residing in the DPA Application service (TCP port 9002), allows an authenticated attacker to execute arbitrary code with SYSTEM privileges by injecting malicious strings into the preScript parameter, which is improperly validated before a system call. With a CVSS score of 8.8 (High), exploitation requires only low privileges and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity and high FAUCET Risk Score, there is no public exploit code, Metasploit module, or evidence of active exploitation, and it has garnered minimal community discussion or media coverage.