CVE-2013-3270: EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group...

Security readout for executives and security teams

This vulnerability lets a local user with nasadmin group membership potentially gain higher privileges on affected EMC VNX or Celerra Control Station systems. It is not described as remotely exploitable in the supplied sources. Business urgency depends on whether these storage management systems still exist and who has local access. Exposure is likely limited to environments running affected EMC VNX or Celerra Control Station versions with local users in the nasadmin group. Internet exposure is not indicated by the sources. Organizations without these platforms, or already on fixed versions, are unlikely to be exposed. Treat this as a targeted privilege-escalation risk for storage administration infrastructure. Prioritize validation if these platforms manage business-critical storage or have shared administrator access. It is not enough to rely on perimeter controls because the issue is local post-access privilege escalation. Mitigation focus: Upgrade VNX Control Station to 7.1.70.2 or later per EMC guidance.; Upgrade Celerra Control Station to 6.0.70.1 or later per EMC guidance.; Restrict nasadmin group membership to explicitly required administrators..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.