CVE-2009-1120: Dell Emc Replistor

Critical severity, CVSS 9.8. EPSS: 7.4% chance of exploitation in the next 30 days.

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.

Affected products

• Dell Emc Replistor: before esa-09-003 (fixed in esa-09-003)

Published 2020-01-15. Last modified 2026-06-16.