CVE-2016-0916

EPSS 5.33%
Veröffentlicht 10.06.2016 01:59:02
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security_alert@emc.com
Teams Watchlist Login
Unerledigt Login

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Networker Version >= 8.2.1.0 <= 8.2.1.8

Emc ≫ Networker Version >= 8.2.2.0 < 8.2.2.6

Emc ≫ Networker Version >= 9.0.0.0 < 9.0.0.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.33%	0.896

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://seclists.org/bugtraq/2016/Jun/43

Third Party Advisory

http://www.securitytracker.com/id/1036075

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-0916

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0916

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0916

EUVD