← Vulnerability feed

Vulnerability record · CVE-2016-0913 · published 5 October 2016

CVE-2016-0913: Emc networker module for microsoft applications improper input validation vulnerability

Emc · Networker Module For Microsoft Applications

The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.

9.8 CVSS 3.0 Critical EPSS 2.6% · top 15.2% CWE-20 · Improper input validation
9.8CVSS 3.0 base score, v2 7.5
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://seclists.org/bugtraq/2016/Oct/6 Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940
http://seclists.org/bugtraq/2016/Oct/6 Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/93348
http://www.securitytracker.com/id/1036940

Track CVE-2016-0913 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-0647EMC Replication Manager and NetWorker irccd.exe remote command executionThe irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x fails to validate …EPSS 64%analysed9.3CVE-2012-2290Emc networker module for microsoft applications code injection vulnerabilityThe client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to …EPSS 3.6%7.2CVE-2013-6182Emc replication manager vulnerabilityUnquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a…EPSS 0.46%4.6CVE-2014-4634Emc appsync vulnerabilityUnquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges vi…EPSS 0.41%2.1CVE-2013-3272Emc replication manager vulnerabilityEMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitiv…EPSS 0.32%2.1CVE-2012-2284Emc networker module for microsoft applications vulnerabilityThe (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build …EPSS 0.33%9.5CVE-2026-88771Citrix netscaler application delivery controller improper input validation vulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEVEPSS 1.0%9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2016-0913), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.