« Volver al listado

CVE-2016-6646

Estado: ModificadaCrítica (9.8)—

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Dell — EMC UnisphereEMC — Solutions EnablerEMC — Unisphere

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6646",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-10-05T01:59:41.217",
  "references": [
    {
      "url": "http://seclists.org/bugtraq/2016/Oct/7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/93343",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1036941",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://seclists.org/bugtraq/2016/Oct/7",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/93343",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1036941",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class."
    },
    {
      "lang": "es",
      "value": "La aplicación web vApp Managers en EMC Unisphere para VMAX Virtual Appliance 8.x en versiones anteriores a 8.3.0 y Solutions Enabler Virtual Appliance 8.x en versiones anteriores a 8.3.0 permite a atacantes remotos ejecutar código arbitrario a través de entrada manipulada para la clase (1) GetSymmCmdRequest o (2) RemoteServiceHandler."
    }
  ],
  "lastModified": "2026-06-17T00:51:31.577",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.0:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC7B88CD-EB84-4C6A-BC2D-0AC04FD01A97"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.1:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE441ED0-2029-4F08-A6EF-03ED53B91A74"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.1.2:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "127D3ECE-7CB0-4ADF-A05C-5E1344DAE116"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_unisphere:8.2:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FFC8144-466D-4D57-9F25-2B3BF85453C7"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F464329C-481E-4DCF-936F-51460EA5DB0F"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B4CEF41-82AF-4828-9ADA-9EB9C2379674"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "516A72B6-8D36-49EB-B1E9-C584BC0E35DF"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F93E038-9508-4F14-A657-C4E5E4355C7E"
            },
            {
              "criteria": "cpe:2.3:a:emc:solutions_enabler:8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "222A0DE1-DA22-4911-8121-A2DB35D67913"
            },
            {
              "criteria": "cpe:2.3:a:emc:unisphere:8.0.3:*:*:*:*:vmax:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884B825C-8CA4-44BF-A53F-FA385D569F94"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}