CVE-2016-6646 The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary cod...
CriticalCVSS 9.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell emc unisphere | = 8.0 | No fix listed |
| Dell emc unisphere | = 8.1 | No fix listed |
| Dell emc unisphere | = 8.1.2 | No fix listed |
| Dell emc unisphere | = 8.2 | No fix listed |
| emc solutions enabler | = 8.0 | No fix listed |
| emc solutions enabler | = 8.0.3 | No fix listed |
| emc solutions enabler | = 8.1 | No fix listed |
| emc solutions enabler | = 8.1.2 | No fix listed |
| emc solutions enabler | = 8.3 | No fix listed |
| emc unisphere | = 8.0.3 | No fix listed |
References
- 20161004 ESA-2016-121: EMC Unisphere for VMAX and Solutions Enabler Virtual Appliances Multiple Vulnerabilities mailing-list third-party-advisory
- 93343 vdb-entry
- 1036941 vdb-entry