Pexip Infinity CVE-2017-6551 Remote Code Execution Vulnerability

Bugtraq ID:	97954
Class:	Input Validation Error
CVE:	CVE-2017-6551
Remote:	Yes
Local:	No
Published:	Apr 20 2017 12:00AM
Updated:	May 02 2017 01:08AM
Credit:	The vendor reported the issue.
Vulnerable:	Pexip Pexip Infinity 14.0
Not Vulnerable:	Pexip Pexip Infinity 14.2

Pexip Infinity CVE-2017-6551 Remote Code Execution Vulnerability

Pexip Infinity is prone to a remote code-execution vulnerability.

Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

Pexip Infinity versions prior to 14.2 are vulnerable.

Pexip Infinity CVE-2017-6551 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Pexip Infinity CVE-2017-6551 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Pexip Infinity CVE-2017-6551 Remote Code Execution Vulnerability

References:

• Pexip Home Page (Pexip)
  
• Security Bulletin: CVE-2017-6551 (Pexip)