Unscored severity · published May 7, 2015
CVE-2015-0538
ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets
–
CVSS
7.2%
EPSS
No
On KEV
Description
ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
Autostart · Emc
through 5.5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0538
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0538
packetstormsecurity.com
http://packetstormsecurity.com/files/131749/EMC-AutoStart-5.4.3-5.5.0-Packet-Injection.html
seclists.org
http://seclists.org/bugtraq/2015/May/25
Third Party Advisory
http://www.kb.cert.org/vuls/id/581276
www.securitytracker.com
http://www.securitytracker.com/id/1032237
More from Autostart
–
CVE-2012-0409
Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via…
–
CVE-2011-2735
Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by…
–
CVE-2009-0311
The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a…