CVE-2015-0524: SQL Injection
First published: Thu Mar 12 2015(Updated: )
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Secure Remote Services | =3.02 | |
| Dell EMC Secure Remote Services | =3.03 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html
- http://seclists.org/bugtraq/2015/Mar/40
- http://seclists.org/fulldisclosure/2015/Mar/119
- http://www.securityfocus.com/archive/1/534930/100/0/threaded
- https://www.securify.nl/advisory/SFY20141113/emc_secure_remote_services_virtual_edition_provisioning_component_is_affected_by_sql_injection.html
Frequently Asked Questions
What is the severity of CVE-2015-0524?
CVE-2015-0524 has a High severity rating due to its potential for remote SQL command execution.
How do I fix CVE-2015-0524?
To address CVE-2015-0524, it is recommended to upgrade to a patched version of EMC Secure Remote Services.
What software versions are affected by CVE-2015-0524?
The affected software versions for CVE-2015-0524 are EMC Secure Remote Services 3.02 and 3.03.
Can CVE-2015-0524 be exploited remotely?
Yes, CVE-2015-0524 can be exploited remotely by attackers to execute arbitrary SQL commands.
What type of vulnerability is CVE-2015-0524?
CVE-2015-0524 is classified as an SQL injection vulnerability.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/emc
- canonical/dell emc secure remote services
- version/dell emc secure remote services/3.02
- version/dell emc secure remote services/3.03