CVE-2017-12479

CVE-2017-12479 describes a privilege escalation vulnerability in Unitrends Backup (UB) versions prior to 10.0.0. An authenticated, low-privilege attacker could exploit a flaw in the session logic, specifically through the LOGDIR environment variable, to gain root privileges and execute arbitrary commands. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a public exploit (EDB-42959) exists, though there is minimal community discussion or media coverage surrounding this CVE.