CVE-2008-5420: The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly...

Security readout for executives and security teams

CVE-2008-5420 is a remote file disclosure issue in EMC Control Center before 6.1. The SAN Manager Master Agent service does not properly authenticate certain file-transfer requests, allowing a remote attacker to read arbitrary files. This matters because storage management systems can contain sensitive configuration, credentials, and operational data. Exposure is most likely in organizations still running legacy EMC Control Center versions before 6.1, especially where the Master Agent service is reachable across broad internal networks or from untrusted segments. The source bundle does not identify internet exposure prevalence or exact service ports. Prioritize if EMC Control Center remains in production. The vulnerability is old, but legacy storage management platforms often persist and may have privileged visibility. Lack of KEV evidence lowers urgency compared with known-exploited issues, but unauthenticated arbitrary file read is still business-significant. Mitigation focus: Inventory EMC Control Center deployments and identify versions before 6.1.; Upgrade affected EMC Control Center installations to 6.1 or later where applicable.; Restrict SAN Manager Master Agent access to trusted management networks only..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.