CVE-2011-0647

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 64%

from disclosure to weapon17 days

Published on NVDFeb 10

1st PoC+17d

metasploitFeb 7

exploitation probability

64%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/41704unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/70853 http://secunia.com/advisories/43164 https://exchange.xforce.ibmcloud.com/vulnerabilities/65205 http://www.securityfocus.com/archive/1/516260 http://www.securityfocus.com/archive/1/516282/100/0/threaded http://www.securityfocus.com/bid/46235 http://www.vupen.com/english/advisories/2011/0304 http://www.zerodayinitiative.com/advisories/ZDI-11-061/