CVE-2017-6885 is a critical privilege escalation vulnerability affecting Flexera Software FlexNet Manager Suite versions 2017 before R1 and 2014 R3 through 2016 R1 SP1. It stems from an error in handling external commands and services within the FlexNet Inventory Agent and FlexNet Beacon. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, allowing for complete compromise of confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2014CPE matchmatch criteria | cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2014:*:*:*:*:*:*:* | ||
2015CPE matchmatch criteria | cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2015:*:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2016:*:*:*:*:*:*:* | ||
2017CPE matchmatch criteria | cpe:2.3:a:flexerasoftware:flexnet_manager_suite:2017:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.