CVE-2016-0916 EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWo...
CriticalCVSS 9.8
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | >= 8.2.1.0, <= 8.2.1.8 | No fix listed |
| emc networker | >= 8.2.2.0, < 8.2.2.6 | 8.2.2.6 |
| emc networker | >= 9.0.0.0, < 9.0.0.6 | 9.0.0.6 |
References
- 20160608 ESA-2016-072: EMC NetWorker Remote Code Execution Vulnerability mailing-list third-party-advisory
- 1036075 third-party-advisory vdb-entry