Emc Autostart vulnerabilities

4 CVEs affecting Emc Autostart, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0538, published 2015-05-07.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0538, published 2015-05-07. High severity, CVSS 9.3. EPSS: 7.2% chance of exploitation in the next 30 days. ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets.
• CVE-2012-0409, published 2012-06-01. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via crafted packets.
• CVE-2009-0311, published 2009-01-27. High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days. The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer.
• CVE-2011-2735, published 2011-08-23. High severity, CVSS 7.9. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted…