RULE(RULE ID:322018)

Rule General Information
Release Date: 2019-06-27
Rule Name: EMC CMCNE FileUploadController Arbitrary File Upload Vulnerability (CVE-2013-6810)
Severity:
CVE ID:
Rule Protection Details
Description: The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityTrackerID:1029485
ExploitDB:42701
http://archives.neohapsis.com/archives/bugtraq/2013-12/0053.html
http://marc.info/?l=bugtraq&m=138723620521347&w=2
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://support.emc.com/products/23304_Connectrix-Manager-Converged-Network-Edition