Is CVE-2017-17562 actively exploited?

Yes. CVE-2017-17562 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2017-17562 be exploited remotely?

The attack vector of CVE-2017-17562 has not been classified yet.

What is the CVSS score of CVE-2017-17562?

CVE-2017-17562 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2017-17562

HIGHCISA KEVIN THE WILD

CVE-2017-17562

Published: December 10, 2021

EPSS:94.34%probability of exploitation in 30 daysPercentile:100.0th

Official Description

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

NVD Source

CISA KEV Advisory

Embedthis GoAhead Remote Code Execution Vulnerability

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

Added to KEV: 2021-12-10Federal patch deadline: 2022-06-10

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

Embedthis GoAhead versions prior to 3.6.5 are vulnerable to remote code execution if CGI is enabled and a CGI program is dynamically linked. The high EPSS score of 0.94339 indicates a significant likelihood of exploitation, requiring prompt attention. This vulnerability is confirmed as exploited by CISA.

This vulnerability is actively exploited in the wild and is listed in CISA's Known Exploited Vulnerabilities catalog. It is remotely exploitable when specific CGI configurations are present.

Recommended Action

Upgrade Embedthis GoAhead to version 3.6.5 or later. If immediate patching is not possible, disable CGI functionality or ensure CGI programs are not dynamically linked to reduce the attack surface.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2017-17562 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2017-17562 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.