CVEvulnerability
CVE-2015-0524
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• emc secure remote services 3.02
• emc secure remote services 3.03
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://seclists.org/bugtraq/2015/Mar/40 seclists.org
- http://seclists.org/fulldisclosure/2015/Mar/119 seclists.org
- http://www.securityfocus.com/archive/1/534930/100/0/threaded www.securityfocus.com
- https://www.securify.nl/advisory/SFY20141113/emc_secure_remote_services_virtual_edition_provisioning_component_is_affected_by_sql_injection.html Exploit
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://seclists.org/bugtraq/2015/Mar/40 seclists.org
- http://seclists.org/fulldisclosure/2015/Mar/119 seclists.org
- http://www.securityfocus.com/archive/1/534930/100/0/threaded www.securityfocus.com
- https://www.securify.nl/advisory/SFY20141113/emc_secure_remote_services_virtual_edition_provisioning_component_is_affected_by_sql_injection.html Exploit