CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

• CWE-78

• http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlThird Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2015/Mar/40Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2015/Mar/118Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/534928/100/0/threadedThird Party Advisory, VDB Entry
• https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.htmlExploit
• http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlThird Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2015/Mar/40Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2015/Mar/118Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/534928/100/0/threadedThird Party Advisory, VDB Entry
• https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.htmlExploit

Published

Mar 12, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0519The InputAccel Database (IADB) installation process in EMC C…
• CVE-2015-0520Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-0521Cross-site scripting (XSS) vulnerability in EMC RSA Certific…
• CVE-2015-0522Cross-site scripting (XSS) vulnerability in EMC RSA Certific…
• CVE-2015-0523EMC RSA Certificate Manager (RCM) before 6.9 build 558 and R…
• CVE-2015-0524SQL injection vulnerability in the Gateway Provisioning serv…
• CVE-2015-0526Multiple cross-site scripting (XSS) vulnerabilities in EMC R…
• CVE-2015-0527EMC Documentum xCelerated Management System (xMS) 1.1 before…
• CVE-2015-0528The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.…
• CVE-2015-0529EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has de…
• CVE-2015-0530Buffer overflow in an unspecified function in nsr_render_log…
• CVE-2015-0531EMC SourceOne Email Management before 7.2 does not have a lo…