CVE-2012-2282
Estado: ModificadaMedia (6.5)—
EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.07%
- Percentil entre todas las CVEs puntuadas: 64
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-264
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-2282",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "security_alert@emc.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-07-16T20:55:00.830",
"references": [
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html",
"source": "security_alert@emc.com"
},
{
"url": "http://www.securitytracker.com/id?1027242",
"source": "security_alert@emc.com"
},
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027242",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request."
},
{
"lang": "es",
"value": "EMC Celerra Network Server v6.x anterior a v6.0.61.0, VNX 7.x anterior a v7.0.53.2, y VNXe v2.0 y v2.1 anterior a v2.1.3.19077 (también conocido como MR1 SP3.2) y v2.2 anterior a v2.2.0.19078 (también conocido como MR2 SP0.2) no aplica correctamente el control de acceso NFS, lo que permite a usuarios remotos autenticados leer o modificar archivos a través de un NFSv2 (1), (2) NFSv3, o (3) solicitud de NFSv4."
}
],
"lastModified": "2026-06-16T23:41:17.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:celerra_network_server:6.0.36.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F52AA92-54E9-4693-948E-5340E367A340"
},
{
"criteria": "cpe:2.3:a:emc:celerra_network_server:6.0.60.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F7109E4-155C-4652-A999-1262A7D1AFA7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:vnx:7.0.12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30EA406F-1E39-4FEE-8C92-DF002781F081"
},
{
"criteria": "cpe:2.3:a:emc:vnx:7.0.53.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0D4E914-FF12-490D-9936-FAB3ADD765F8"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:vnxe:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FA03425-391F-494C-96D9-67989C6BCBD6"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:2.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE6E6464-A5A6-41FE-B07F-293381B8DA10"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:2.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB103003-B0EC-4054-9228-DA8515409201"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:2.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DE6F296-634B-44A6-8DCB-C48D9AE8CFBF"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:mr1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A81FC2C-0264-414E-809A-5F6944020C15"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:mr1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A568E0C0-15BD-4CE0-8359-C91C42DB87BA"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:mr1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "738A34A4-2260-4927-823F-AB68E90427E4"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:mr1:sp3.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0730F43-5067-4730-A91E-F2CBD6FDFE31"
},
{
"criteria": "cpe:2.3:a:emc:vnxe:mr2:sp0.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84A9A15F-CF34-4623-A033-9C8A662AAF2A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security_alert@emc.com"
}