High severity8.4NVD Advisory· Published Mar 22, 2017· Updated May 13, 2026

CVE-2017-6970

Description

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.

Affected products

Alienvault/Ossim
cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*
Range: <=5.3.6
Alienvault/Unified Security Management
cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*
Range: <=5.3.6
Nfsen/Nfsen
cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*
Range: <=1.3.7

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/nvd
www.alienvault.com/forums/discussion/8325/nvd
www.alienvault.com/forums/discussion/8698nvd
www.exploit-db.com/exploits/42305/nvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000