Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:emc_vnx2_versions_prior_to_oe_for_file_8.1.9.211,_emc_vnx1_versions_prior_to_oe_for_file_7.1.80.8:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductEmc Vnx2 Versions Prior To Oe For File 8.1.9.211, Emc Vnx1 Versions Prior To Oe For File 7.1.80.8 (91ec716c-9afb-5061-8b37-b430ed3f9fc3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-4987 vulnerable 2026-06-08 05:09:38.919659 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:44.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4985 vulnerable 2026-06-08 05:09:38.916762 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:43.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4984 vulnerable 2026-06-08 05:09:38.914068 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with root-level privileges on the targeted VNX Control Station system, aka remote code execution.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:44.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.