9.8
CVE-2016-0913
- EPSS 0.35%
- Veröffentlicht 05.10.2016 01:59:05
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginThe client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Networker Module For Microsoft Applications Version <= 8.2.3.6
Emc ≫ Networker Module For Microsoft Applications Version3.0
Emc ≫ Networker Module For Microsoft Applications Version3.0.1
Emc ≫ Replication Manager Version <= 5.5.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.57 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.