CVE-2009-1120

CRITIQUE 9.8CVE-2009-1120 · Published 15/01/2020 · updated 16/06/2026

En bref

CVE-2009-1120 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant emc replistor (dell).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.4%, plus élevée que 94.5% des vulnérabilités.
Correctif : mettre à jour vers esa-09-003 ou plus récent.

Package	Affected versions	Patched versions
emc replistor dell	`< esa-09-003`	`esa-09-003`

Description

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.

References

zerodayinitiative.com/advisories/ZDI-09-068 · Third Party Advisory
fortiguard.com/encyclopedia/ips/17967/emc-replistor-server-service-doasocommand-code-execution · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free