Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2013-6810

Published: 12/12/2013 Updated: 16/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Emc

Vulnerability Summary

The server in Brocade Network Advisor prior to 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote malicious users to execute arbitrary code by using a servlet to upload an executable file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

emc connectrix manager 11.2.1

emc connectrix manager 12.0.1

emc connectrix manager 12.0.3

Exploits

Exploit DB: EMC CMCNE 11.2.1 - FileUploadController Remote Code Execution (Metasploit)
require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'EMC CMCNE FileUploadController Remote Code Execution', 'Description' => %q{ This module exploits a fileupload vulnerability ...
Exploit DB: EMC CMCNE Inmservlets.war FileUploadController 11.2.1 - Remote Code Execution (Metasploit)
require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'EMC CMCNE Inmservletswar FileUploadController Remote Code Execution', 'Description' => %q{ This module exploits a file upl ...

References

CWE-94http://archives.neohapsis.com/archives/bugtraq/2013-12/0053.htmlhttp://secunia.com/advisories/56143http://www.securitytracker.com/id/1029485http://marc.info/?l=bugtraq&m=138723620521347&w=2http://www.attrition.org/pipermail/vim/2014-January/002755.htmlhttp://www.zerodayinitiative.com/advisories/ZDI-13-283/https://exchange.xforce.ibmcloud.com/vulnerabilities/90728https://www.exploit-db.com/exploits/42702/https://www.exploit-db.com/exploits/42701/https://nvd.nist.govhttps://www.exploit-db.com/exploits/42702/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook