VULNERABILITY INTELLIGENCE

CVE-2016-6645

CVSS score8.8 HIGH
EPSS probability3.62%
CISA KEVNot currently listed
Published2016-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references