Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-6552

Опубликовано: 07 мая 2016
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:veritas:netbackup_appliance:1.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:1.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:1.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.0:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.5:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.6.1.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup_appliance:2.7.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:veritas:netbackup:7.0:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.6.1.2:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:7.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02162
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.

EPSS

Процентиль: 84%
0.02162
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-284