CVE-2017-1720

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
IBM	Client Application Access	1.0.0.1; 1.0.1; 1.0.1.2
IBM	Notes	8.5.3.6; 8.5.1.5; 8.5.2.4; 9.0; 9.0.1.9

References

http://www.ibm.com/support/docview.wss?uid=swg22010766Patch, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010767Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134807VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010766Patch, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010767Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134807VDB Entry, Vendor Advisory

Timeline

Published: Feb 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-172005.9Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5 CVE-2017-172015.5Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130,CVE-2017-172027.5Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V CVE-2017-17215.6IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual CVE-2017-172158.8Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets CVE-2017-172165.9Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 CVE-2017-172175.9Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 CVE-2017-172185.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-172195.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-17226.3IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which co CVE-2017-172205.3SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 CVE-2017-172218.8Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerabilit