CVE-2012-2288

high · 9.3

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.

9.3

CVSS

33.1%

EPSS (exploit prob.)

98th

EPSS percentile

2012-09-04

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-134

Affected products

Vendor	Product	Affected versions
emc	networker	7.6.3
emc	networker	7.6.4
emc	networker	8.0

Check a specific version with /api/v1/cve/match.

References

http://archives.neohapsis.com/archives/bugtraq/2012-08/0219.html
http://www.securityfocus.com/bid/55330
http://www.securitytracker.com/id?1027459
http://archives.neohapsis.com/archives/bugtraq/2012-08/0219.html
http://www.securityfocus.com/bid/55330
http://www.securitytracker.com/id?1027459

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-2288