Unscored severity · published Apr 22, 2011
CVE-2011-1421
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Networker · Emc
7.5.2.0; 7.5.2.1; 7.5.2.2; 7.5.2.3; 7.5.2.4; 7.5.3; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1421
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1421
Vendor Advisory
http://secunia.com/advisories/44237
securityreason.com
http://securityreason.com/securityalert/8214
securitytracker.com
http://securitytracker.com/id?1025383
www.securityfocus.com
http://www.securityfocus.com/archive/1/517532/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47410
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1025
More from Networker
9.8
CVE-2017-15548
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection…
9.8
CVE-2016-0916
EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access…
8.8
CVE-2017-15550
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection…
8.8
CVE-2017-15549
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection…
8.1
CVE-2017-8022
An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4)