Vulnerability Details CVE-2016-0922
EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 5.0
Products affected by CVE-2016-0922
-
cpe:2.3:a:emc:vipr_srm:3.6.0
-
cpe:2.3:a:emc:vipr_srm:3.6.4
-
cpe:2.3:a:emc:vipr_srm:3.7.1