Emc Replistor vulnerabilities

4 CVEs affecting Emc Replistor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3744, published 2009-10-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3744, published 2009-10-22. Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days. rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144.
CVE-2009-1119, published 2009-04-15. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2)…
CVE-2007-5323, published 2007-10-11. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor to create a smaller buffer than expected, which triggers a…
CVE-2007-6426, published 2008-02-21. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data.