{"id":"CVE-2012-2288","aliases":["EUVD-2012-2281","GHSA-qrqq-j9pv-4jjp"],"status":"published","title":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4...","description":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.3312,"percentile":0.98374,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-134"],"published":"2012-09-04T10:00:00Z","modified":"2026-06-16T23:41:17Z","exploits":[{"source":"exploitdb","id":"EDB-22525","title":"EMC NetWorker - Format String (Metasploit)","type":"remote","platform":"windows","date":"2012-11-07","verified":true,"url":"https://www.exploit-db.com/exploits/22525"},{"source":"metasploit","id":"exploit/windows/emc/networker_format_string","title":"EMC Networker Format String","type":"exploit","platform":"Windows","date":"2012-08-29","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/emc/networker_format_string"}],"products":[{"vendor":"emc","product":"networker"}],"references":[{"url":"http://www.securityfocus.com/bid/55330","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-08/0219.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securitytracker.com/id?1027459","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2288"},{"url":"https://github.com/advisories/GHSA-qrqq-j9pv-4jjp"}],"sources":{"cve":[{"id":"CVE-2012-2288","description":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.","status":"published","published":"2012-09-04T10:00:00Z","modified":"2024-08-06T19:26:09.006Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2281","description":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.","status":"published","published":"2012-09-04T10:00:00Z","modified":"2024-08-06T19:26:09Z","updated_at":"2026-11-03T01:56:14.86717Z"}],"ghsa":[{"id":"GHSA-qrqq-j9pv-4jjp","title":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4...","description":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.","status":"published","published":"2022-05-17T05:14:11Z","modified":"2023-01-28T05:03:30Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:43:59.339521Z"}],"nvd":[{"id":"CVE-2012-2288","description":"Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.","status":"published","published":"2012-09-04T11:04:48.967Z","modified":"2026-06-16T23:41:17.64Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:02:15.643902Z"}]}}