Vulnerability in Emc Alphastor

CVE-2013-0929

Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command.

EPSS: 0.034 (87.8th percentile) — read the EPSS interpretation.

Affected products

Emc Alphastor — versions 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Broken Link)
security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)