CVE-2013-0928 in the critical feed json
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execu…
published 13y ago modified 4mo ago also EUVD-2013-0939
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 34.3%
- EPSS 34.3% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit and Exploit-DB
Summary
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
Is CVE-2013-0928 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerTimeline
- First public exploit (Metasploit exploit/windows/emc/alphastor_device_manager_exec)
- Published
Exploit prediction
34.34% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/windows/emc/alphastor_device_manager_exec EMC AlphaStor Device Manager Opcode 0x75 Command Injection metasploit exploit, excellent rank, 2013-01-18
- EDB-34756 EMC AlphaStor Device Manager Opcode 0x75 - Command Injection (Metasploit) remote, 2014-09-24
- securityfocus.com http://www.securityfocus.com/bid/57472 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
exploit-db.com
/exploits/34756
exploit
-
securityfocus.com
/bid/57472
vdb-entry, exploit
-
archives.neohapsis.com
/archives/bugtraq/2013-01/0078.html
mailing-list
- zerodayinitiative.com /advisories/ZDI-13-033/
Sources
- CVE List CVE-2013-0928
- NVD CVE-2013-0928
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.