CVE-2017-4985

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attack...

PT-2017-2638

Name of the Vulnerable Software and Affected Versions EMC VNX2 versions prior to 8.1.9.211 EMC VNX1 versions prior to 7.1.80.8 Description The issue is related to a lack of input sanitization, which may allow an unauthenticated remote attacker to elevate their permissions to root through a comman...

PT-2017-16248

Name of the Vulnerable Software and Affected Versions EMC VNX2 versions prior to 8.1.9.211 EMC VNX1 versions prior to 7.1.80.8 Description A local authenticated user can load a maliciously crafted file in the search path, potentially allowing the attacker to execute arbitrary code on the targeted...

CVE-2017-4984: Improper Neutralization of Special Elements used in a Command

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with...

ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability

ESA-2013-041.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability EMC Identifier: ESA-2013-041 CVE Identifier: CVE-2013-3270 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: •...

CVE-2013-3270

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...

Design/Logic Flaw

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...

CVE-2013-3270

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...

CVE-2013-3270

CVE-2013-3270 affects EMC VNX Control Station (versions prior to 7.1.70.2) and EMC Celerra Control Station (prior to 6.0.70.1). The root cause is incorrect group ownership for unspecified script files, allowing local users to escalate privileges by leveraging the nasadmin group membership. The vu...

PT-2013-4266

Name of the Vulnerable Software and Affected Versions EMC VNX Control Station versions prior to 7.1.70.2 EMC Celerra Control Station versions prior to 6.0.70.1 Description The issue is related to incorrect group ownership for unspecified script files. This allows local users who are members of th...

CVE-2013-3270: Undefined Security Weakness

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...