CVE-2013-3270

2013-05-2014:44:35

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

High

EPSS

Percentile

5.1%

JSON

EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership.

Affected configurations

Nvd

Node

emcvnx_control_stationRange≤7.1.70.1

AND

emcvnxMatch5100

emcvnxMatch5300

emcvnxMatch5500

emcvnxMatch5700

emcvnxMatch7500

Node

emccelerra_control_stationRange≤6.0.70.0

AND

emcvnxMatch5100

emcvnxMatch5300

emcvnxMatch5500

emcvnxMatch5700

emcvnxMatch7500

VendorProductVersionCPE
emcvnx_control_station*cpe:2.3:a:emc:vnx_control_station:*:*:*:*:*:*:*:*
emcvnx5100cpe:2.3:h:emc:vnx:5100:*:*:*:*:*:*:*
emcvnx5300cpe:2.3:h:emc:vnx:5300:*:*:*:*:*:*:*
emcvnx5500cpe:2.3:h:emc:vnx:5500:*:*:*:*:*:*:*
emcvnx5700cpe:2.3:h:emc:vnx:5700:*:*:*:*:*:*:*
emcvnx7500cpe:2.3:h:emc:vnx:7500:*:*:*:*:*:*:*
emccelerra_control_station*cpe:2.3:a:emc:celerra_control_station:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	vnx_control_station	*	cpe:2.3:a:emc:vnx_control_station::::::::
emc	vnx	5100	cpe:2.3:h:emc:vnx:5100:::::::*
emc	vnx	5300	cpe:2.3:h:emc:vnx:5300:::::::*
emc	vnx	5500	cpe:2.3:h:emc:vnx:5500:::::::*
emc	vnx	5700	cpe:2.3:h:emc:vnx:5700:::::::*
emc	vnx	7500	cpe:2.3:h:emc:vnx:7500:::::::*
emc	celerra_control_station	*	cpe:2.3:a:emc:celerra_control_station::::::::