CVE-2016-0913

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.

Ссылки

http://seclists.org/bugtraq/2016/Oct/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940
http://seclists.org/bugtraq/2016/Oct/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:networker_module_for_microsoft_applications:*:*:*:*:*:*:*:*

Версия до 8.2.3.6 (включая)

cpe:2.3:a:emc:networker_module_for_microsoft_applications:3.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:networker_module_for_microsoft_applications:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:replication_manager:*:*:*:*:*:*:*:*

Версия до 5.5.3 (включая)

EPSS

Процентиль: 57%

0.00354

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-hq79-qmcg-vqq8