CVE-2015-0515
EMC Watch4Net < 6.5 and ViPR SRM < 3.6.0 - Authenticated Arbitrary File Upload
Title source: llmDescription
Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031567
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72256
Broken Link mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
Scores
EPSS
0.0123
EPSS Percentile
79.4%
Details
Status
published
Products (2)
emc/vipr_srm
< 3.6.0
emc/watch4net
< 6.5
Published
Jan 21, 2015
Tracked Since
Feb 18, 2026