Emc Alphastor vulnerabilities

4 CVEs affecting Emc Alphastor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0946, published 2013-05-10.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0928, published 2013-01-21. High severity, CVSS 9.3. EPSS: 34.3% chance of exploitation in the next 30 days. The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
• CVE-2013-0946, published 2013-05-10. High severity, CVSS 9.3. EPSS: 28.5% chance of exploitation in the next 30 days. Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
• CVE-2013-0929, published 2013-01-21. High severity, CVSS 7.6. EPSS: 3.4% chance of exploitation in the next 30 days. Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string…
• CVE-2013-0930, published 2013-01-31. High severity, CVSS 7.6. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name.