CVE-2011-0647

2011-02-1018:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-0647

irccd.exe

emc replication manager client

networker module

remote execution

command injection

nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.966 High

EPSS

Percentile

99.6%

JSON

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

CPENameOperatorVersion
emc:replication_manageremc replication managereq5.2.2
emc:replication_manageremc replication managereq5.2
emc:replication_manageremc replication managereq2.0
emc:replication_manageremc replication managerle5.2.3
emc:networker_moduleemc networker moduleeq2.1
emc:networker_moduleemc networker moduleeq2.2

CPE	Name	Operator	Version
emc:replication_manager	emc replication manager	eq	5.2.2
emc:replication_manager	emc replication manager	eq	5.2
emc:replication_manager	emc replication manager	eq	2.0
emc:replication_manager	emc replication manager	le	5.2.3
emc:networker_module	emc networker module	eq	2.1
emc:networker_module	emc networker module	eq	2.2