CVE-2011-0647

EPSS 73.16%
Veröffentlicht 10.02.2011 18:00:59
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle security_alert@emc.com
CVE-Watchlists
Login
Unerledigt
Login

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Replication Manager Editionclient Version <= 5.2.3

Emc ≫ Replication Manager Version2.0 Editionclient

Emc ≫ Replication Manager Version5.2 Editionclient

Emc ≫ Replication Manager Version5.2.2 Editionclient

Emc ≫ Networker Module Version2.1 Update- Editionmicrosoft_applications

Emc ≫ Networker Module Version2.2 Update- Editionmicrosoft_applications

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	73.16%	0.987

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/70853

http://secunia.com/advisories/43164

Vendor Advisory

http://www.securityfocus.com/archive/1/516260

http://www.securityfocus.com/archive/1/516282/100/0/threaded

http://www.securityfocus.com/bid/46235

http://www.vupen.com/english/advisories/2011/0304

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-061/

https://exchange.xforce.ibmcloud.com/vulnerabilities/65205

https://nvd.nist.gov/vuln/detail/CVE-2011-0647

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-0647

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-0647

EUVD