PatchTheCVECVE-2017-7279: An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privilege
CVE-2017-7279 is a critical-severity flaw (CVSS 9.8) affecting enterprise backup. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.
Why this priority
- Critical severity
- EPSS top 9%: very likely to be exploited
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 4.4% (top 9%) |
| CISA exploited list | No |
| Weakness | CWE-565 |
| Published | 2017-04-12 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-7279?
enterprise backup: upgrade to newer than 8.2.0-8. Exact commands for each OS are on this page.
Is CVE-2017-7279 being exploited?
CVE-2017-7279 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-7279 affect?
CVE-2017-7279 affects enterprise backup. Severity is critical (CVSS 9.8). An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.
How urgent is CVE-2017-7279?
Priority 62/100. Critical severity; EPSS top 9%: very likely to be exploited; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2017-7284 HIGH 8.8 UPGRADE An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api
- CVE-2017-7283 HIGH 8.8 UPGRADE An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending
- CVE-2017-7282 MEDIUM 5.5 UPGRADE An issue was discovered in Unitrends Enterprise Backup before 9.1.1
- CVE-2017-7281 HIGH 8.8 UPGRADE An issue was discovered in Unitrends Enterprise Backup before 9.1.2
- CVE-2017-7280 CRITICAL 9.8 UPGRADE An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0