CVE-2013-6810: emc connectrix_manager Code Injection

Vulnerability summary

CVE-2013-6810 is a high (CVSS 10.0) Code Injection vulnerability in emc connectrix_manager. EPSS estimates a 17.00% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 12-12-2013
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file.

• CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.