Vulnerability Details CVE-2014-0645
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.7%
CVSS Severity
CVSS v2 Score 4.7
References
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
- http://seclists.org/fulldisclosure/2014/Mar/426
- https://gist.github.com/brandonprry/9895721
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
- http://seclists.org/fulldisclosure/2014/Mar/426
- https://gist.github.com/brandonprry/9895721
Products affected by CVE-2014-0645
-
cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0
-
cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0
-
cpe:2.3:a:emc:file_management_appliance_software:7.0
-
cpe:2.3:h:emc:cloud_tiering_appliance:-
-
cpe:2.3:h:emc:file_management_appliance:-