Lucene search

K
cveDellCVE-2015-0515
HistoryJan 21, 2015 - 3:17 p.m.

CVE-2015-0515

2015-01-2115:17:13
dell
web.nvd.nist.gov
26
vulnerability
emc
m&r
watch4net
vipr srm
cve-2015-0515
file upload

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.008

Percentile

82.0%

Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.

Affected configurations

Nvd
Node
emcwatch4netRange6.5
Node
emcvipr_srmRange3.6.0
VendorProductVersionCPE
emcwatch4net*cpe:2.3:a:emc:watch4net:*:*:*:*:*:*:*:*
emcvipr_srm*cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.008

Percentile

82.0%