VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
VMware vSphere
Exploit
CVE-2017-4914
NVD
Refer to CVE-2017-4914 NVD advisory