CVE-2014-4620

The EMC NetWorker Module for MEDITECH aka NMMEDI 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files...

CVE-2014-4620: Exposure of Sensitive Information to an Unauthorized Actor

The EMC NetWorker Module for MEDITECH aka NMMEDI 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files...

ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability

ESA-2014-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability EMC Identifier: ESA-2014-074 CVE Identifier: CVE-2014-2519 Severity Rating: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P Affected products: • EMC...

EMC RecoverPoint Appliance restrictions bypass

Access to arbitrary ports is not restricted...

CVE-2014-2519

The default configuration of EMC RecoverPoint Appliance RPA 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information about open ports, or cause a denial of service, by sending packets to many ports...

Default configuration

The default configuration of EMC RecoverPoint Appliance RPA 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information about open ports, or cause a denial of service, by sending packets to many ports...

CVE-2014-2519

The default configuration of EMC RecoverPoint Appliance RPA 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information about open ports, or cause a denial of service, by sending packets to many ports...

CVE-2014-2519

CVE-2014-2519 affects EMC RecoverPoint Appliance (RPA) 4.1 prior to 4.1.0.1, where the firewall is disabled by default. This allows unauthenticated remote actors to discover open ports and potentially cause a denial of service by sending traffic to multiple ports. The EMC advisory ESA-2014-074 do...

CVE-2014-2519: Exposure of Sensitive Information to an Unauthorized Actor

The default configuration of EMC RecoverPoint Appliance RPA 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information about open ports, or cause a denial of service, by sending packets to many ports...