Test ID:	1.3.6.1.4.1.25623.1.0.140250
Category:	Web application abuses
Title:	Unitrends < 9.1.2 Multiple Vulnerabilities
Summary:	Unitrends is prone to multiple vulnerabilities:;; - RCE in /api/includes/systems.php Unitrends < 9.0.0;; - Forced Password Change Unitrends in /api/includes/users.php < 9.1.2;; - Unrestricted File Upload;; - Privilege Escalation in Unitrends < 9.0.0
Description:	Summary: Unitrends is prone to multiple vulnerabilities: - RCE in /api/includes/systems.php Unitrends < 9.0.0 - Forced Password Change Unitrends in /api/includes/users.php < 9.1.2 - Unrestricted File Upload - Privilege Escalation in Unitrends < 9.0.0 Affected Software/OS: Unitrends prior to version 9.1.2. Solution: Update to version 9.1.2 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7280 https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-7284 Common Vulnerability Exposure (CVE) ID: CVE-2017-7281 Common Vulnerability Exposure (CVE) ID: CVE-2017-7279 Common Vulnerability Exposure (CVE) ID: CVE-2017-7282 https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/ https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWGAA0/000005558?r=1 Common Vulnerability Exposure (CVE) ID: CVE-2017-7283 https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWBAA0/000005557?r=1
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.