ID CVE-2015-0545
Summary EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:emc:unisphere:8.0.0:*:*:*:*:vmax:*:*
    cpe:2.3:a:emc:unisphere:8.0.0:*:*:*:*:vmax:*:*
  • cpe:2.3:a:emc:unisphere:8.0.1:*:*:*:*:vmax:*:*
    cpe:2.3:a:emc:unisphere:8.0.1:*:*:*:*:vmax:*:*
  • cpe:2.3:a:emc:unisphere:8.0.2:*:*:*:*:vmax:*:*
    cpe:2.3:a:emc:unisphere:8.0.2:*:*:*:*:vmax:*:*
  • cpe:2.3:a:emc:unisphere:8.0.3:*:*:*:*:vmax:*:*
    cpe:2.3:a:emc:unisphere:8.0.3:*:*:*:*:vmax:*:*
CVSS
Base: 10.0 (as of 28-12-2016 - 02:59)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bugtraq 20150625 ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability
sectrack 1032732
Last major update 28-12-2016 - 02:59
Published 29-06-2015 - 10:59
Last modified 28-12-2016 - 02:59
Back to Top