---
id: CVE-2017-17674
title: BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion
summary: >-
  BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due
  to the lack of restrictions on what can be targeted, the system can be
  vulnerable to attacks such as system fingerprinting, internal port scanning,
  Server Sid…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-918
vendor: bmc
product: remedy_mid-tier
affected:
  - remedy_mid-tier = 9.1
published: '2021-05-19'
updated: '2026-07-05'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2017-17674'
references:
  - url: 'http://remedy.com'
    label: cve@mitre.org
  - url: >-
      https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
    label: cve@mitre.org
  - url: 'https://seclists.org/fulldisclosure/2017/Oct/52'
    label: cve@mitre.org
  - url: 'http://bmc.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://remedy.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://docs.bmc.com/docs/ars91/en/9-1-00-fixes-available-for-remedy-ar-system-security-vulnerabilities-800555806.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://seclists.org/fulldisclosure/2017/Oct/52'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.02076
epssPercentile: 0.80366
ingestedAt: '2026-07-05T00:59:26.420Z'
---

## Overview

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE).

## Affected

- `remedy_mid-tier = 9.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.