The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0525
Reference (s):
- BUGTRAQ:20150310 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities
- URL: http://seclists.org/bugtraq/2015/Mar/40
- BUGTRAQ:20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition
- URL: http://www.securityfocus.com/archive/1/534928/100/0/threaded
- FULLDISC:20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition