EMC NetWorker vulnerabilities
4 known CVE vulnerabilities in EMC NetWorker, translated and rated.
- CVE-2017-8022High
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) related to a buffer overflow in the Server service (nsrd). A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary code on vulnerable installations of the software or cause a denial of service, depending on the target system's platform.
- CVE-2015-6849High
EMC NetWorker versions before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 are vulnerable to denial of service attacks. Remote attackers can cause process outages by sending malformed RPC authentication messages.
- CVE-2015-0530High
Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.
- CVE-2016-0916Critical
EMC NetWorker versions 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandle authentication, allowing remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.