CVE-2015-6849

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-05 · updated 2026-06-17
Weakness: CWE-20

Description

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service (process outage) via malformed RPC authentication messages.

Affected products

EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: 8.0.4.4, 8.1.0.0, 8.1.0.1, 8.1.0.2, 8.1.0.3, 8.1.0.4 (+43)

References

http://seclists.org/bugtraq/2015/Dec/18
http://www.securitytracker.com/id/1034287
http://seclists.org/bugtraq/2015/Dec/18
http://www.securitytracker.com/id/1034287

Get alerted when CVE-2015-6849 or the next vulnerability affects your stack