CVE-2016-6645: dell emc_unisphere Improper Input Validation
Vulnerability summary
CVE-2016-6645 is a high (CVSS 9.0) Improper Input Validation vulnerability in dell emc_unisphere. EPSS estimates a 3.62% chance of exploitation in the next 30 days, higher than 89.3% of scored vulnerabilities.
Timeline
- 05-10-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.62%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.62% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Emc2 products
- solutions_enabler8.0 | 8.0.3 | 8.1 | 8.1.2 | 8.2
- unisphere8.0.3
Dell1 product
- emc_unisphere8.0 | 8.1 | 8.1.2 | 8.2
2 vendors · 3 products