HIGH · 7.5

CVE-2012-2289

EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via uns...

Vulnerability Description

EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
EmcApplicationxtender Desktop<= 6.5
EmcApplicationxtender Web Access .Net<= 6.5

Related Weaknesses (CWE)

References

FAQ

What is CVE-2012-2289?

CVE-2012-2289 is a vulnerability with a CVSS score of 7.5 (HIGH). EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via uns...

How severe is CVE-2012-2289?

CVE-2012-2289 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-2289?

Check the references section above for vendor advisories and patch information. Affected products include: Emc Applicationxtender Desktop, Emc Applicationxtender Web Access .Net.