VIR Vulnerability Intelligence Relay

CVE-2012-2288

critical
Published 2012-09-04 · Modified 2026-04-29
CVSS v3
—
CVSS v2
9.3
VIR risk
9.3

Description

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
dell emcnetworker7.6.3
dell emcnetworker7.6.4
dell emcnetworker8.0

References

CWEs

CWE-134

Verify integrity in audit chain (admin only). AS-IS.