CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2017-7420
Severity
CRITICAL
CVSS
9.8
EPSS
2.44%
Original NVD Description
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
Related CVEs
Other vulnerabilities affecting the same vendor(s)