CVE-2010-2860

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-08-05 · updated 2026-06-16
Weakness: CWE-264

Description

The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.

Affected products

EMC Celerra Network Attached Storage: all versions

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
http://securitytracker.com/id?1024271
http://www.exploit-db.com/exploits/14536
http://www.securityfocus.com/archive/1/512823/100/0/threaded
http://www.securityfocus.com/archive/1/513564/100/0/threaded
http://www.securityfocus.com/bid/42134
http://www.vupen.com/english/advisories/2010/2337
https://exchange.xforce.ibmcloud.com/vulnerabilities/60885
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt
http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
http://securitytracker.com/id?1024271
http://www.exploit-db.com/exploits/14536

Get alerted when CVE-2010-2860 or the next vulnerability affects your stack