7.8

CVE-2012-0406

Exploit

The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
EmcData Protection Advisor Version5.5
EmcData Protection Advisor Version5.5 Updatesp1
EmcData Protection Advisor Version5.6
EmcData Protection Advisor Version5.6 Updatesp1
EmcData Protection Advisor Version5.7
EmcData Protection Advisor Version5.7 Updatesp1
EmcData Protection Advisor Version5.8
EmcData Protection Advisor Version5.8 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.97% 0.945
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C