PT-2013-2722 · Emc · Hp Device Manager+2

Aniway.Anyway · Publicado 2013-01-21 · Atualizado 2015-10-13 · CVE-2013-0928

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC AlphaStor version 4.0 before build 800

Description The issue allows remote attackers to execute arbitrary commands. This is achieved through a DCP "run command" operation in the NetWorker command processor in rrobotd.exe within the Device Manager.

Recommendations For EMC AlphaStor version 4.0 before build 800, update to build 800 or later to resolve the issue. As a temporary workaround, consider restricting access to the DCP "run command" operation to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2013-0928

ZDI-13-033

Produtos afetados

Hp Device Manager

Emc Alphastor

Networker

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/emc/alphastor_device_manager_exec.rb · Exploit
• 🔥 http://exploit-db.com/exploits/34756 · Exploit
• 🔥 http://securityfocus.com/bid/57472 · Exploit
• 🔥 https://exploit-db.com/exploits/34756 · Exploit
• http://zerodayinitiative.com/advisories/ZDI-13-033 · Nota
• https://zerodayinitiative.com/advisories/ZDI-13-033 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-0928 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0078.html · Nota