Signature Detail
Short Name |
APP:EMC-ALPHASTORE-CMDEXEC |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
EMC AlphaStore Mutiple Parameter Parsing Command Injecton |
Release Date |
2013/11/26 |
Update Number |
2322 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: EMC AlphaStore Mutiple Parameter Parsing Command Injecton
This signature detects attempts to exploit a known vulnerability against EMC AlphaStore. Attackers can inject and execute arbitrary commands on the targeted system.
Extended Description
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
Affected Products
- emc alphastor 4.0
References
- CVE: CVE-2013-0928