CVE-2016-6646
CriticalSummary
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to upgrade to version 8.3.0 or later to mitigate this vulnerability.
Original NVD description (English source)
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.