ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities CVE Identifier: CVE-2015-0235, CVE-2015-0524, CVE-2015-0525 Severity Rating: CVSSv2 Base Score: See below for individual scores for each CVE Affected...

CVE-2015-0525

The ESRS VE Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (versions 3.02 and 3.03) contains a command injection flaw that could allow an unauthenticated remote attacker to execute arbitrary OS commands. The vulnerability is tied to the Gateway Provisioning component; ...

CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...