How severe is CVE-2013-3285?

CVE-2013-3285 has a CVSS 2.0 base score of 3.5, rated low severity.

Is CVE-2013-3285 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (59th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-3285?

CVE-2013-3285 primarily affects Emc Networker. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-3285?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2013-3285 published?

CVE-2013-3285 was published on 2013-11-02 and last updated on 2026-06-16.

CVE-2013-3285

CVE-2013-3285 is a low-severity vulnerability in Emc Networker with a CVSS 2.0 base score of 3.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-310.

Key facts

Severity: Low (CVSS 2.0 base score 3.5)
EPSS exploit prediction: 1% (59th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-310
Affected product: Emc Networker
Published: 2013-11-02
Last modified: 2026-06-16

Description

The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.

Frequently asked questions

What is CVE-2013-3285?: The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.
How severe is CVE-2013-3285?: CVE-2013-3285 has a CVSS 2.0 base score of 3.5, rated low severity.
Is CVE-2013-3285 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (59th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-3285?: CVE-2013-3285 primarily affects Emc Networker. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-3285?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2013-3285 published?: CVE-2013-3285 was published on 2013-11-02 and last updated on 2026-06-16.

References

Affected products (14)

cpe:2.3:a:emc:networker:8.0:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:emc:networker:8.0.2.2:*:*:*:*:*:*:*

More vulnerabilities in Emc Networker

CVE-2006-3892 — Critical (CVSS 10.0): The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak…
CVE-2017-15548 — Critical (CVSS 9.8): An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE)…
CVE-2016-0916 — Critical (CVSS 9.8): EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote…
CVE-2012-4607 — Critical (CVSS 9.3): Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote…
CVE-2012-2288 — Critical (CVSS 9.3): Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before…
CVE-2012-0395 — Critical (CVSS 9.3): Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows…

All CVEs affecting Emc Networker →

Other CWE-310 (Cryptographic Issues) vulnerabilities

CVE-2014-7878 — Critical (CVSS 10.0): The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived…
CVE-2013-3712 — Critical (CVSS 10.0): SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has…
CVE-2013-6952 — Critical (CVSS 10.0): The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote…
CVE-2013-6838 — Critical (CVSS 10.0): An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000)…
CVE-2013-0137 — Critical (CVSS 10.0): The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189…
CVE-2011-5123 — Critical (CVSS 10.0): The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in…

Browse all CWE-310 (Cryptographic Issues) vulnerabilities →