7.5
CVE-2016-6650
- EPSS 1.61%
- Veröffentlicht 21.03.2017 16:59:00
- Zuletzt bearbeitet 10.07.2026 14:57:26
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginEMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Recoverpoint For Virtual Machines Version <= 4.4.1.1
Emc ≫ Recoverpoint Version <= 4.4.1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.61% | 0.728 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 1.6 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.securityfocus.com/archive/1/540303/30/0/threaded
http://www.securityfocus.com/bid/96156
http://www.securitytracker.com/id/1038066