PT-2013-2723

CVE-2013-0929

·

Published

2013-01-21

·

Updated

2016-08-18

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions EMC AlphaStor versions 4.0 before build 800
Description The issue is related to a format string vulnerability in the vsnsprintf function in rrobotd.exe, part of the Device Manager in EMC AlphaStor. This vulnerability allows remote attackers to execute arbitrary code via format string specifiers in a command.
Recommendations For versions prior to build 800, update to build 800 or later to resolve the issue. As a temporary workaround, consider restricting access to the Device Manager to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-13-034
Found an issue in the description? Have something to add? Feel free to write us 👾