CVE-2011-0647 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 63.7% (pctl 99)
Patch early
A public exploit exists.
Description
The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 63.68% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-02-10 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| emc | networker module |
| emc | replication manager |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | EMC Replication Manager < 5.3 - Command Execution (Metasploit) | 2011-02-27 |
References
- http://osvdb.org/70853
- http://secunia.com/advisories/43164
- http://www.securityfocus.com/archive/1/516260
- http://www.securityfocus.com/archive/1/516282/100/0/threaded
- http://www.securityfocus.com/bid/46235
- http://www.vupen.com/english/advisories/2011/0304
- http://www.zerodayinitiative.com/advisories/ZDI-11-061/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65205
- http://osvdb.org/70853
- http://secunia.com/advisories/43164
- http://www.securityfocus.com/archive/1/516260
- http://www.securityfocus.com/archive/1/516282/100/0/threaded
- http://www.securityfocus.com/bid/46235
- http://www.vupen.com/english/advisories/2011/0304
- http://www.zerodayinitiative.com/advisories/ZDI-11-061/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65205
→ the Explorer · watch your stack · NVD