{"id":"CVE-2017-6885","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6885","generatedAt":"2026-10-28T23:13:01.326Z","title":"An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated…","description":"An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.","published":"2017-05-16T16:29:00.000Z","lastModified":"2026-06-17T01:23:16.000Z","status":"Modified","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["flexerasoftware/flexnet manager suite"],"epss":{"score":0.01169,"percentile":0.67217,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.17%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://secuniaresearch.flexerasoftware.com/advisories/76223/","tags":["Permissions Required"],"source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://secuniaresearch.flexerasoftware.com/advisories/76223/","tags":["Permissions Required"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6885","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}