Lucene search

K
nvd[email protected]NVD:CVE-2012-2288
HistorySep 04, 2012 - 11:04 a.m.

CVE-2012-2288

2012-09-0411:04:48
CWE-134
web.nvd.nist.gov
3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.942

Percentile

99.2%

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.

Affected configurations

Nvd
Node
emcnetworkerMatch7.6.3
OR
emcnetworkerMatch7.6.4
OR
emcnetworkerMatch8.0
VendorProductVersionCPE
emcnetworker7.6.3cpe:2.3:a:emc:networker:7.6.3:*:*:*:*:*:*:*
emcnetworker7.6.4cpe:2.3:a:emc:networker:7.6.4:*:*:*:*:*:*:*
emcnetworker8.0cpe:2.3:a:emc:networker:8.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.942

Percentile

99.2%