CVE-2009-1120

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0670%

EPSS Percentile10.03th

Published2020年1月15日

Last Modified2024年11月21日

Vulnerability Description

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.

Affected Platforms (CPE)

📦

Dell

Emc Replistor

< esa-09-003

References & Advisories

🔗 http://www.zerodayinitiative.com/advisories/ZDI-09-068/

🔗 https://fortiguard.com/encyclopedia/ips/17967/emc-replistor-server-service-doasocommand-code-execution