CVE-2015-6849
HighSummary
EMC NetWorker versions before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 are vulnerable to denial of service attacks. Remote attackers can cause process outages by sending malformed RPC authentication messages.
Risk Assessment
Attackers can remotely disrupt system operations, leading to service outages. This may affect data availability and organizational operations.
Recommendation
It is recommended to update EMC NetWorker to the latest version to mitigate this vulnerability. Additionally, monitor RPC traffic for potential attack attempts.
Other vulnerabilities in EMC NetWorker
See all- CVE-2017-8022High
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) related to a buffer overflow in the Server service (nsrd). A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary code on vulnerable installations of the software or cause a denial of service, depending on the target system's platform.
- CVE-2015-0530High
Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.
- CVE-2016-0916Critical
EMC NetWorker versions 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandle authentication, allowing remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.
Original NVD description (English source)
EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service (process outage) via malformed RPC authentication messages.