PT-2013-2723
CVE-2013-0929
·
Published
2013-01-21
·
Updated
2016-08-18
Description by
CVSS 2.0
7.6
HighMetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
EMC AlphaStor versions 4.0 before build 800
Description
The issue is related to a format string vulnerability in the vsnsprintf function in rrobotd.exe, part of the Device Manager in EMC AlphaStor. This vulnerability allows remote attackers to execute arbitrary code via format string specifiers in a command.
Recommendations
For versions prior to build 800, update to build 800 or later to resolve the issue. As a temporary workaround, consider restricting access to the Device Manager to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾