Lucene search

K
cve[email protected]CVE-2013-3270
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3270

2022-10-0316:14:45
CWE-264
web.nvd.nist.gov
20
cve-2013-3270
emc
vnx
celerra
control station
privilege escalation
nvd
security

6.8 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership.

Affected configurations

NVD
Node
emcvnx_control_stationRange7.1.70.1
AND
emcvnxMatch5100
OR
emcvnxMatch5300
OR
emcvnxMatch5500
OR
emcvnxMatch5700
OR
emcvnxMatch7500
Node
emccelerra_control_stationRange6.0.70.0
AND
emcvnxMatch5100
OR
emcvnxMatch5300
OR
emcvnxMatch5500
OR
emcvnxMatch5700
OR
emcvnxMatch7500

6.8 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2013-3270