CVE-2018-11062 Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability

2018-10-2900:00:00

dell

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.9%

JSON

Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named ‘support’ and ‘admin’ that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.

CNA Affected

[
  {
    "product": "Integrated Data Protection Appliance",
    "vendor": "Dell EMC",
    "versions": [
      {
        "lessThan": "2.3",
        "status": "affected",
        "version": "2.X",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105764

seclists.org/fulldisclosure/2018/Oct/53