CVE-2014-0633 The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an u...
HighCVSS 7.7
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc vplex geosynchrony | = 4.0 | No fix listed |
| emc vplex geosynchrony | = 5.0 | No fix listed |
| emc vplex geosynchrony | = 5.1 | No fix listed |
| emc vplex geosynchrony | = 5.2 | No fix listed |
| emc vplex geosynchrony | = 5.2.1 | No fix listed |