CVE-2017-6972

CVE-2017-6972 is a critical privilege escalation vulnerability affecting AlienVault USM and OSSIM prior to version 5.3.7, and NfSen prior to 1.3.8. The flaw stems from improper privilege dropping, causing the NfSen Perl code to execute unnecessarily as root. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows unauthenticated remote attackers to achieve full compromise (confidentiality, integrity, and availability) with low attack complexity. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-42314) details a command injection exploit for NfSen < 1.3.7 / AlienVault OSSIM 4.3.1, indicating public exploit code availability. Despite this, there is no recorded community discussion or media coverage, suggesting limited public awareness or active exploitation.