PT-2013-2722 · Emc · Hp Device Manager+2

Aniway.Anyway · Published 2013-01-21 · Updated 2015-10-13 · CVE-2013-0928

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC AlphaStor version 4.0 before build 800

Description The issue allows remote attackers to execute arbitrary commands. This is achieved through a DCP "run command" operation in the NetWorker command processor in rrobotd.exe within the Device Manager.

Recommendations For EMC AlphaStor version 4.0 before build 800, update to build 800 or later to resolve the issue. As a temporary workaround, consider restricting access to the DCP "run command" operation to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2013-0928

ZDI-13-033

Affected Products

Hp Device Manager

Emc Alphastor

Networker

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/emc/alphastor_device_manager_exec.rb · Exploit
• 🔥 http://exploit-db.com/exploits/34756 · Exploit
• 🔥 http://securityfocus.com/bid/57472 · Exploit
• 🔥 https://exploit-db.com/exploits/34756 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-13-033 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-0928 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-13-033 · Note
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0078.html · Note