The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
El procesador de comandos NetWorker en rrobotd.exe en el Administrador de dispositivos de EMC AlphaStor 4.0 antes de build 800 permite a atacantes remotos ejecutar código arbitrario a través de un DCP, operación "ejecutar comando" .
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AlphaStor for EMC Networker. Authentication is not required to exploit this vulnerability.
The specific flaw exists within Device Manager (rrobotd.exe) which listens by default on port 3000. When parsing the 0x75 command, the process does not properly filter the user supplied data allowing for arbitrary command injection and execution. A remote attacker can abuse this to execute remote code under the context of the SYSTEM user.
