CVE-2008-2157

published 2008-05-29

CVE-2008-2157: robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a…

Priority P2 70 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

EXPLOIT

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
emc_corporation	alphastor	—	—

Detection & IOCs extracted from sources · hover to see the quote

port TCP/3500↗

• → Monitor for unexpected or malformed packets sent to TCP port 3500 targeting EMC AlphaStor Library Manager (robotd process); arbitrary command injection occurs via a string field in the packet payload. ↗
• → Metasploit auxiliary module exists for EMC AlphaStor Library Manager arbitrary command execution; presence of this module in use indicates active exploitation attempts. ↗
• → Metasploit auxiliary module also exists for EMC AlphaStor Device Manager arbitrary command execution; monitor for exploitation of the Device Manager component as well. ↗

• · Vulnerability is confirmed specifically for EMC AlphaStor 3.1 SP1 on Windows; other versions or platforms may differ in exposure. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20