Lucene search

K
cve[email protected]CVE-2012-2288
HistorySep 04, 2012 - 11:04 a.m.

CVE-2012-2288

2012-09-0411:04:48
CWE-134
web.nvd.nist.gov
141
cve-2012-2288
format string vulnerability
emc networker
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.943 High

EPSS

Percentile

99.2%

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.

Affected configurations

NVD
Node
emcnetworkerMatch7.6.3
OR
emcnetworkerMatch7.6.4
OR
emcnetworkerMatch8.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.943 High

EPSS

Percentile

99.2%