Read the docs
TI-2012-02021 Aliases CVE-2012-2282GHSA-vp34-vrw9-fxw3

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and…

Priority LOW 31CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0.19078 (aka MR2 SP0.2) do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a (1) NFSv2, (2) NFSv3, or (3) NFSv4 request.

Why it matters now

EPSS 0.01066 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:emc:celerra_network_server:6.0.36.4:*:*:*:*:*:*:*6.0.36.4VulnerableEMC
cpe:2.3:a:emc:celerra_network_server:6.0.60.2:*:*:*:*:*:*:*6.0.60.2VulnerableEMC
cpe:2.3:a:emc:vnx:7.0.12.0:*:*:*:*:*:*:*7.0.12.0VulnerableEMC
cpe:2.3:a:emc:vnx:7.0.53.1:*:*:*:*:*:*:*7.0.53.1VulnerableEMC
cpe:2.3:a:emc:vnxe:2.0:*:*:*:*:*:*:*2.0VulnerableEMC
cpe:2.3:a:emc:vnxe:2.0:sp1:*:*:*:*:*:*2.0 sp1VulnerableEMC
cpe:2.3:a:emc:vnxe:2.0:sp2:*:*:*:*:*:*2.0 sp2VulnerableEMC
cpe:2.3:a:emc:vnxe:2.0:sp3:*:*:*:*:*:*2.0 sp3VulnerableEMC
cpe:2.3:a:emc:vnxe:mr1:sp1:*:*:*:*:*:*mr1 sp1VulnerableEMC
cpe:2.3:a:emc:vnxe:mr1:sp2:*:*:*:*:*:*mr1 sp2VulnerableEMC
  • cpe:2.3:a:emc:celerra_network_server:6.0.36.4:*:*:*:*:*:*:* Versions 6.0.36.4 Vulnerable ·EMC
  • cpe:2.3:a:emc:celerra_network_server:6.0.60.2:*:*:*:*:*:*:* Versions 6.0.60.2 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnx:7.0.12.0:*:*:*:*:*:*:* Versions 7.0.12.0 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnx:7.0.53.1:*:*:*:*:*:*:* Versions 7.0.53.1 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:2.0:sp1:*:*:*:*:*:* Versions 2.0 sp1 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:2.0:sp2:*:*:*:*:*:* Versions 2.0 sp2 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:2.0:sp3:*:*:*:*:*:* Versions 2.0 sp3 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:mr1:sp1:*:*:*:*:*:* Versions mr1 sp1 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:mr1:sp2:*:*:*:*:*:* Versions mr1 sp2 Vulnerable ·EMC
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:emc:vnxe:mr1:sp3:*:*:*:*:*:*mr1 sp3VulnerableEMC
cpe:2.3:a:emc:vnxe:mr1:sp3.1:*:*:*:*:*:*mr1 sp3.1VulnerableEMC
cpe:2.3:a:emc:vnxe:mr2:sp0.1:*:*:*:*:*:*mr2 sp0.1VulnerableEMC
  • cpe:2.3:a:emc:vnxe:mr1:sp3:*:*:*:*:*:* Versions mr1 sp3 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:mr1:sp3.1:*:*:*:*:*:* Versions mr1 sp3.1 Vulnerable ·EMC
  • cpe:2.3:a:emc:vnxe:mr2:sp0.1:*:*:*:*:*:* Versions mr2 sp0.1 Vulnerable ·EMC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-2282
  2. 2026-10-03 Alias added: GHSA-vp34-vrw9-fxw3

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences