Is CVE-2017-14385 actively exploited?

No active exploitation of CVE-2017-14385 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-14385 be exploited remotely?

Yes. CVE-2017-14385 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2017-14385?

CVE-2017-14385 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2017-14385

HIGH

CVE-2017-14385

CWE-119Published: December 20, 2017· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution.

NVD Source

Technical Analysis

CVE-2017-14385 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.