← Vulnerability feed

Vulnerability record · CVE-2017-17055 · published 7 December 2017

CVE-2017-17055: Articatech artica proxy os command injection vulnerability

AArticatech · Artica Proxy

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.

9.0 CVSS 3.0 Critical EPSS 8.7% · top 5.0% CWE-78 · OS command injection
9.0CVSS 3.0 base score, v2 8.5
8.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 8 tagged exploit
17 Jun 2026Last modified by NVD

Description

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://hyp3rlinx.altervista.org/advisories/ARTICA-WEB-PROXY-v3.06-REMOTE-CODE-EXECUTION-CVE-2017-17055.txt ExploitVendor Advisory
http://packetstormsecurity.com/files/145183/Artica-Web-Proxy-3.06.112216-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2017/Dec/3 ExploitMailing ListThird Party Advisory
https://www.exploit-db.com/exploits/43206/ ExploitThird Party AdvisoryVDB Entry
http://hyp3rlinx.altervista.org/advisories/ARTICA-WEB-PROXY-v3.06-REMOTE-CODE-EXECUTION-CVE-2017-17055.txt ExploitVendor Advisory
http://packetstormsecurity.com/files/145183/Artica-Web-Proxy-3.06.112216-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2017/Dec/3 ExploitMailing ListThird Party Advisory
https://www.exploit-db.com/exploits/43206/ ExploitThird Party AdvisoryVDB Entry

Track CVE-2017-17055 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-2054Artica Proxy unauthenticated PHP object deserialization leads to code executionArtica-Proxy's administrative web application deserializes arbitrary PHP objects supplied by unauthenticated users, which then allows code execution …EPSS 81%analysed9.8CVE-2024-2055Articatech artica proxy authentication bypass via alternate path vulnerabilityThe "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does …EPSS 0.93%9.8CVE-2024-2056Articatech artica proxy authentication bypass via alternate path vulnerabilityServices that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailo…EPSS 17%9.8CVE-2021-41739Articatech artica proxy os command injection vulnerabilityA OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param…EPSS 2.6%9.8CVE-2020-13159Articatech artica proxy os command injection vulnerabilityArtica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Al…EPSS 9.3%7.5CVE-2024-2053Articatech artica proxy relative path traversal vulnerabilityThe Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code…EPSS 45%7.5CVE-2020-15052Articatech artica proxy sql injection vulnerabilityAn issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields.EPSS 2.2%7.5CVE-2020-13158Artica Proxy directory traversal in fw.progrss.details.php popup parameterArtica Proxy Community Edition before 4.30.000000 is vulnerable to directory traversal through the popup parameter of fw.progrss.details.php. An unau…EPSS 54%analysed

Source: NIST National Vulnerability Database (record CVE-2017-17055), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.