Approved changes feed: RSS · Atom

cpe:2.3:h:emc:vnx1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductVnx1 (32f191b7-c924-5eee-89cf-97c8555b4f74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-4987 not_vulnerable 2026-06-08 05:09:38.919768 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:44.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4985 not_vulnerable 2026-06-08 05:09:38.916865 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:43.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4984 not_vulnerable 2026-06-08 05:09:38.916339 Details available
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with root-level privileges on the targeted VNX Control Station system, aka remote code execution.
Published: 2017-06-19T12:00:00.000Z
Updated: 2024-08-05T14:47:44.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.