Emc Secure Remote Services vulnerabilities

8 CVEs affecting Emc Secure Remote Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-11080, published 2018-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0525, published 2015-03-12. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2015-0544, published 2015-07-05. High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days. EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by…
CVE-2015-0524, published 2015-03-12. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via…
CVE-2015-6852, published 2015-12-28. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.
CVE-2017-4986, published 2017-06-14. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
CVE-2015-0543, published 2015-07-05. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain…
CVE-2018-11079, published 2018-10-18. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An…
CVE-2018-11080, published 2018-10-18. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions…