CVE-2008-2157

EMC AlphaStor 3.1 SP1 - Remote Code Execution via TCP Port 3500

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-2157. PoCs published by MC, including Metasploit module auxiliary/admin/emc/alphastor_librarymanager_exec.

AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in EMC AlphaStor Library Manager by sending a maliciously crafted packet to TCP port 3500. The vulnerability allows arbitrary command execution due to insufficient input sanitization.

Description

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500.

Exploits (2)

metasploit WORKING POC

by MC · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/emc/alphastor_librarymanager_exec.rb

View Code ZIP pw:eip

This Metasploit module exploits a command injection vulnerability in EMC AlphaStor Library Manager by sending a maliciously crafted packet to TCP port 3500. The vulnerability allows arbitrary command execution due to insufficient input sanitization.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: EMC AlphaStor Library Manager

No auth needed

Prerequisites: Network access to TCP port 3500 on the target system

MITRE ATT&CK

T1059 - Command and Scripting Interpreter T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →