« Volver al listado

CVE-2013-6182

Estado: ModificadaAlta (7.2)—

Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Replication Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6182",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-28T04:53:06.583",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://osvdb.org/101430",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/64520",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029536",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/101430",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64520",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029536",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de búsqueda  de ruta de EMC Replication Manager antes de 5,5 que permite a usuarios locales conseguir privilegios a través de una aplicación diseñada en un directorio padre de un directorio previsto."
    }
  ],
  "lastModified": "2026-06-17T00:00:07.477",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:replication_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABFCC480-13B4-4F67-81D8-4FB395AFBA55",
              "versionEndIncluding": "5.4"
            },
            {
              "criteria": "cpe:2.3:a:emc:replication_manager:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6460E0E2-BBCD-4E55-B3DA-9531D574F88D"
            },
            {
              "criteria": "cpe:2.3:a:emc:replication_manager:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E8F2448-EF8E-4F15-9AB0-7EC0A0C11E86"
            },
            {
              "criteria": "cpe:2.3:a:emc:replication_manager:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EF5CE77-3BAF-4A2B-B85C-85DC523144C5"
            },
            {
              "criteria": "cpe:2.3:a:emc:replication_manager:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC46A080-A8EB-464E-B2C3-CEDC6E4ECB33"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/428.html\n\n\"CWE-428: Unquoted Search Path or Element\"",
  "sourceIdentifier": "security_alert@emc.com"
}