Skip to content
Fencer Vulns
critical 9.8

CVE-2017-7552 json

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be exec…

published 2017-09-28 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-16560

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.4%
EPSS 1.4% chance of exploitation in 30 days, percentile 72%
public exploits
0
none known

Summary

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Patch / fix

  • fping mobile application platform 4.5 3.10-4.el7map
  • qstat mobile application platform 4.5 2.11-13.20080912svn311.el7map
  • redis mobile application platform 4.5 2.8.21-2.el7map
  • ssmtp mobile application platform 4.5 2.64-14.el7map
  • nagios mobile application platform 4.5 4.0.8-8.el7map
  • phantomjs mobile application platform 4.5 1.9.7-3.el7map
  • sendEmail mobile application platform 4.5 1.56-2.el7
  • supervisor mobile application platform 4.5 3.1.3-3.el7map

red hat advisories RHSA-2017:2674

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-7552 updated cvss 7.5

RHMAP Millicore IDE allows RCE on SCM

  • Red Hat Mobile Application Platform 4.5 fping 3.10-4.el7map, sendEmail 1.56-2.el7, ssmtp 2.64-14.el7map, nagios 4.0.8-8.el7map, redis 2.8.21-2.el7map, rhmap45/fh-aaa 1.0.5-12, +69 more
    fixed: vendor fix RHSA-2017:2674

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.39% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.