CVE-2010-2860 The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read,....
HighCVSS 9.3
EPSS 4.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc celerra network attached storage | All versions | No fix listed |
References
- 20100802 TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance mailing-list
- 1024271 vdb-entry
- 14536 exploit
- 20100803 TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance mailing-list
- 20100908 ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing. mailing-list
- 42134 vdb-entry
- ADV-2010-2337 vdb-entry
- celerra-ipaddress-unauth-access(60885) vdb-entry
- www.trustwave.com