NE
Product
Networker
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Networker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-15548 | 9.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 9.0; 9.1; 9.2 |
| CVE-2016-0916 | 9.8 | Jun 10 | EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access… Affected: 8.2.1.0 through 8.2.1.8; 8.2.2.0 before 8.2.2.6; 9.0.0.0 before 9.0.0.6 |
| CVE-2017-15550 | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 9.0; 9.1; 9.2 |
| CVE-2017-15549 | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 9.0; 9.1; 9.2 |
| CVE-2017-8022 | 8.1 | Oct 18 | An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) Affected: through 8.2.4.8; 9.0.0.3; 9.0.0.4; 9.0.0.5; 9.0.0.6; 9.0.0.7; +19 more |
| CVE-2015-6849 | – | Dec 5 | EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service (process outage) via… Affected: 8.0.4.4; 8.1.0.0; 8.1.0.1; 8.1.0.2; 8.1.0.3; 8.1.0.4; +34 more |
| CVE-2015-0530 | – | Apr 17 | Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges… Affected: through 8.0.4.3; 8.1.0.0; 8.1.0.1; 8.1.0.2; 8.1.0.3; 8.1.0.4; +26 more |
| CVE-2014-4620 | – | Oct 25 | The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in… Affected: All versions, or not specified |
| CVE-2013-3285 | – | Nov 2 | The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover… Affected: 8.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +8 more |
| CVE-2013-0943 | – | Jul 31 | EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with… Affected: 7.6; 7.6; 7.6; 7.6.0.2; 7.6.0.3; 7.6.0.4; +34 more |
| CVE-2013-0940 | – | May 3 | The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges… Affected: through 7.6.5.2; 6.0; 6.1; 7.0; 7.2; 7.3; +34 more |
| CVE-2012-4607 | – | Jan 17 | Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code via crafted SunRPC data Affected: 7.5; 7.5; 7.5; 7.5; 7.5.2.0; 7.5.2.1; +34 more |
| CVE-2012-2288 | – | Sep 4 | Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via… Affected: 7.6.3; 7.6.4; 8.0 |
| CVE-2012-0395 | – | Jan 27 | Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or… Affected: 7.5; 7.5; 7.5; 7.5; 7.5.2.0; 7.5.2.1; +31 more |
| CVE-2011-1421 | – | Apr 22 | EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to… Affected: 7.5.2.0; 7.5.2.1; 7.5.2.2; 7.5.2.3; 7.5.2.4; 7.5.3; +23 more |
| CVE-2011-0321 | – | Feb 1 | librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source… Affected: through 7.5; 6.0; 6.1; 7.0; 7.2; 7.3; +22 more |
| CVE-2006-3892 | – | Mar 2 | The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary… Affected: 7.3.2 |
| CVE-2002-0113 | – | Mar 25 | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive… Affected: 6.1 |
| CVE-2002-0114 | – | Mar 25 | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from… Affected: 6.1 |
| CVE-2001-0910 | – | Nov 21 | Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address… Affected: 6.0 |
Showing 20