VulnerabilityModified
CVE-2015-0525
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
HIGH 7.5EPSS 3.66%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.66% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- emc/secure remote services
- Source
- security_alert@emc.com
References
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlThird Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Mar/40Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2015/Mar/118Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/534928/100/0/threadedThird Party Advisory, VDB Entry
- https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.htmlExploit
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlThird Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Mar/40Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2015/Mar/118Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/534928/100/0/threadedThird Party Advisory, VDB Entry
- https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.htmlExploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.