CVE-2015-0525 The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc secure remote services | = 3.02 | No fix listed |
| emc secure remote services | = 3.03 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20150310 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities mailing-list third-party-advisory
- 20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition mailing-list third-party-advisory
- 20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition mailing-list third-party-advisory vdb-entry
- www.securify.nl exploit