RCE in EMC Secure Remote Services
CVE-2015-0525
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.
Affected products
- Emc Secure_remote_services — versions 3.02, 3.03
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)
- security_alert@emc.com (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
- security_alert@emc.com (Exploit, x_refsource_MISC)
- security_alert@emc.com (VDB Entry, Third Party Advisory, x_refsource_MISC)