PT-2015-1389 · Emc · Emc Unisphere For Vmax

Publicado 2015-06-29 · Atualizado 2016-12-28 · CVE-2015-0545

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions 8.0.0 through 8.0.3.3

Description The issue is related to the setup of the Java Debugging Wire Protocol (JDWP) service in EMC Unisphere for VMAX, which allows remote attackers to execute arbitrary code. The vulnerability is associated with errors in the code.

Recommendations For versions 8.0.0 through 8.0.3.3, update to version 8.0.3.4 or later to resolve the issue. As a temporary workaround, consider disabling the JDWP service until a patch is available. Restrict access to the JDWP service to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-10484

CVE-2015-0545

Produtos afetados

Emc Unisphere For Vmax

Referências · 4

• https://bdu.fstec.ru/vul/2015-10484 · Nota de Segurança
• http://securitytracker.com/id/1032732 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0545 · Nota de Segurança
• http://seclists.org/bugtraq/2015/Jun/129 · Nota