CVE-2009-1120: EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.

Security readout for executives and security teams

CVE-2009-1120 is a remote code execution issue in legacy EMC RepliStor Server Service. An unauthenticated attacker could send a specially crafted packet to the service and potentially run code on the affected server. This matters most where RepliStor is still deployed or reachable on internal networks. Exposure is likely limited to organizations still running EMC RepliStor versions before ESA-09-003. Risk rises if the RepliStor Server Service is reachable from untrusted networks, flat internal networks, backup segments, or legacy Windows server environments. Treat as a high-priority legacy exposure review, not a broad emergency unless EMC RepliStor is present. If found, prioritize patching, segmentation, or retirement because unauthenticated remote code execution can lead to server compromise. Mitigation focus: Identify any EMC RepliStor deployments and confirm exact version or advisory level.; Apply EMC guidance for ESA-09-003 or later where applicable.; Restrict network access to RepliStor Server Service from trusted management and replication hosts only..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.