EMC Celerra/VNX/VNXe unauthorized access

NFS access restriction vulnerabilities...

ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability EMC Identifier: ESA-2012-027 CVE Identifier: CVE-2012-2282 Severity Rating: CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC Celerra Network Server...

EMC Celerra Control Station Default Credentials

The remote host appears to be an EMC Celerra control station. Such devices come with two well known default credentials which give full control on the configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Default Password (nasadmin) for 'nasadmin' Account

The account 'nasadmin' on the remote host has the password 'nasadmin'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "nasadmin"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc...

ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing. EMC Identifier: ESA-2010-015 CVE Identifier: CVE-2010-2860 Severity Rating: CVSS v2 Base Score: 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C Affected products: EMC SW: NAS Code...

EMC Celerra Network Attached Storage appliance unauthorized access

Full NFS access from predefined list of IP addresses is enabled by default...

TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

CVE-2010-2860

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

Code injection

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

CVE-2010-2860

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

CVE-2010-2860

EMC Celerra NAS is affected by CVE-2010-2860. The NFS server exports the root ("/") and accepts internal IPs on the private network from external sources, enabling an attacker to read, create, or modify files in the user data directory via NFS requests. Exploitation in Trustwave/EMC advisories in...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published:...