CVE-2017-8018: Improper Input Validation

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-14754

Affected product: OpenText Document Sciences xPression (formerly EMC Document Sciences xPression), v4.5SP1 Patch 13 (and possibly older versions). Vulnerability type & cause: Arbitrary File Read due to a directory traversal flaw in the xsd_datasource_schema_file parameter used by /xAdmin/html/cm_...

CVE-2017-8021

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

CVE-2017-8018

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8021

EMC Elastic Cloud Storage (ECS) before version 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system. The NVD entry for CVE-2017-8021 indicates a high-impact, unauthenticated, network-exposed issue with a ...

CVE-2017-8018

Affected product : EMC AppSync Host Plug-in (Windows) v3.5 and earlier. Vulnerability : Denial of Service (DoS) in the host plug‑in that could be exploited by a remote attacker to compromise the affected system. Root cause/impact : DoS as described in CVE-2017-8018; CVSS metrics from NVD indicate...

PT-2017-18071

Name of the Vulnerable Software and Affected Versions EMC AppSync host plug-in version 3.5 and below Description The issue is a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system. Recommendations For EMC AppSync host plug-i...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of September 25, 2017

A couple of years back, I remember working at a tradeshow booth and giving a demo to someone who was interested in our solution. He said, “Your solution is great, but I need something that will not let anyone from the outside in my network and I need something that will not let my employees do...

EMC AppSync Host Plug-in Denial of Service Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, Service Level Agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage.Host Plug-in is one of the host plug-ins. A denial of service...

EMC Elastic Cloud Storage Default Password Vulnerability

EMC Elastic Cloud Storage is a multi-purpose global storage solution from EMC Corporation USA. A security vulnerability exists in EMC Elastic Cloud Storage versions prior to 3.1. A remote attacker could exploit the vulnerability to compromise an affected system...

(0Day) EMC Data Protection Advisor ScheduledReportResource Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by default. Wh...

PT-2017-3058

Name of the Vulnerable Software and Affected Versions EMC Elastic Cloud Storage ECS versions prior to 3.1 Description The issue is related to an undocumented account vulnerability that could be leveraged by malicious users to compromise the system. It is also associated with the use of a...

Dell EMC VNX Monitoring and Reporting RMI Registry Deserialization of Untrusted Data Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within ...

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

CVE-2017-8012

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Java Management Extensions JMX protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service DoS condition. Attackers with knowledge o...

CVE-2017-8012

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Java Management Extensions JMX protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service DoS condition. Attackers with knowledge o...

CVE-2017-8007

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, a...

Directory traversal

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, a...

Design/Logic Flaw

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Java Management Extensions JMX protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service DoS condition. Attackers with knowledge o...

CVE-2017-8007

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution vulnerability (CVE-2017-8007) affects EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs where the Webservice Gateway processes inputs unsafely, enabling a directory traversal seq...