« Volver al listado

CVE-2016-6645

Estado: ModificadaAlta (8.8)—

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Dell — EMC UnisphereEMC — Solutions EnablerEMC — Unisphere

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6645",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-10-05T01:59:40.170",
  "references": [
    {
      "url": "http://seclists.org/bugtraq/2016/Oct/7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/93343",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1036941",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://seclists.org/bugtraq/2016/Oct/7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/93343",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1036941",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class."
    },
    {
      "lang": "es",
      "value": "La aplicación web vApp Managers en EMC Unisphere para VMAX Virtual Appliance 8.x en versiones anteriores a 8.3.0 y Solutions Enabler Virtual Appliance 8.x en versiones anteriores a 8.3.0 permite a usuarios remotos autenticados ejecutar código arbitrario a través de entrada manipulada para la clase (1) GeneralCmdRequest, (2) PersistantDataRequest o (3) GetCommandExecRequest."
    }
  ],
  "lastModified": "2026-06-17T00:51:31.477",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.0:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC7B88CD-EB84-4C6A-BC2D-0AC04FD01A97"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.1:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE441ED0-2029-4F08-A6EF-03ED53B91A74"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.1.2:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "127D3ECE-7CB0-4ADF-A05C-5E1344DAE116"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.2:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FFC8144-466D-4D57-9F25-2B3BF85453C7"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F464329C-481E-4DCF-936F-51460EA5DB0F"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B4CEF41-82AF-4828-9ADA-9EB9C2379674"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "516A72B6-8D36-49EB-B1E9-C584BC0E35DF"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F93E038-9508-4F14-A657-C4E5E4355C7E"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B83A0FDA-87EB-4A2D-89FC-5801777ED5DF"
            },
            {
              "criteria": "cpe:2.3:a:emc:unisphere:8.0.3:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884B825C-8CA4-44BF-A53F-FA385D569F94"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}