Skip to content

CVE-2017-8011 EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Pack...

CriticalCVSS 9.8 EPSS 14.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.

Affected products

ProductAffected versionsFixed in
Dell emc mr All versions No fix listed
Dell emc storage monitoring and reporting = 4.0.2 No fix listed
Dell emc vipr srm <= 4.0.2 No fix listed
Dell emc vnx monitoring and reporting All versions No fix listed

References

  • seclists.org mailing-list third-party-advisory
  • 99555 third-party-advisory vdb-entry
  • 1038905 third-party-advisory vdb-entry