CVE-2015-0543 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain....

MediumCVSS 5.8 EPSS 0.67%

Published: 2015-07-05 13:00
Updated: 2026-06-17 03:20
Exploit status: No public exploit known

Description

EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Product	Affected versions	Fixed in
emc secure remote services	= 3.02	No fix listed
emc secure remote services	= 3.03	No fix listed
emc secure remote services	= 3.04	No fix listed

References

20150626 ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities mailing-list
1032740 vdb-entry

CVSS v2.0

5.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.67% (percentile 52.7)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.