EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CEmc Unisphere
APPEmc8.0.08.0.18.0.28.0.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
Related vulnerabilities
CVE-2016-6646CRITICAL9.8PL ✓same product
RCE w EMC Unisphere i Solutions Enabler Virtual Appliance przez vApp Manager
CVE-2016-6645HIGH8.8same product
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions E...
CVE-2018-15764CRITICAL9.8PL ✓same vendor
RCE w Dell EMC ESRS Policy Manager przez niezabezpieczone usługi JMX
CVE-2018-11061CRITICAL9.1PL ✓same vendor
Server-Side Template Injection z wykonaniem kodu jako root w RSA NetWitness/Security Analytics
CVE-2018-1245CRITICAL9.0PL ✓same vendor
RSA Identity Lifecycle – bypass autoryzacji umożliwiający wykonanie poleceń OS