CVE-2011-0647

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to…

published February 10, 2011

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
64%
Percentile
99.2
In the wild
Unconfirmed
What it is

⚠️ A remote command execution vulnerability lurks within EMC Replication Manager Client! 🚀 With a simple connection to TCP port 6542, attackers could run arbitrary commands—yikes! Think of this flaw like a restaurant's kitchen where the chef has been given a magical phone that takes orders without verifying who's on the other end. If a rogue caller can place an order, they could request anything—burning the place to the ground or serving up something truly unpalatable! If exploited, an attacker could execute any command they desire on your system, leading to unauthorized data access, service disruption, or even full system compromise. The consequences could be significant, especially if sensitive data is at stake!

Put simply

Think of this flaw like a restaurant's kitchen where the chef has been given a magical phone that takes orders without verifying who's on the other end. If a rogue caller can place an order, they could request anything—burning the place to the ground or serving up something truly unpalatable! This vulnerability allows remote attackers to execute arbitrary commands via the RunProgram function in the irccd.exe service, which listens on TCP port 6542, without proper authentication or validation.

What to do

If exploited, an attacker could execute any command they desire on your system, leading to unauthorized data access, service disruption, or even full system compromise. The consequences could be significant, especially if sensitive data is at stake! To protect your systems, update to EMC Replication Manager Client version 5.3 or later, and ensure that the service is properly configured to restrict access to trusted sources only. Regularly audit firewall rules and monitor traffic to this port! You're on the right track! Follow these steps to secure your systems and keep those cyber villains at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.63676 · 99.2th percentile
Published
2011-02-10T17:00Z
EPSS history
Timeline
  • 10 FEB 17:00Z
    The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to…
    cvelistv5