CVE-2016-0916
CriticalSummary
EMC NetWorker versions 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandle authentication, allowing remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.
Risk Assessment
This vulnerability poses a risk of unauthorized access to the system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update EMC NetWorker to the latest version to mitigate this vulnerability and implement additional security measures to monitor access to instances.
Other vulnerabilities in EMC NetWorker
See all- CVE-2017-8022High
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) related to a buffer overflow in the Server service (nsrd). A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary code on vulnerable installations of the software or cause a denial of service, depending on the target system's platform.
- CVE-2015-6849High
EMC NetWorker versions before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 are vulnerable to denial of service attacks. Remote attackers can cause process outages by sending malformed RPC authentication messages.
- CVE-2015-0530High
Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.
Original NVD description (English source)
EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.